__ __ __ __ _____ _ _ _____ _ _ _ | \/ | \ \ / / | __ \ (_) | | / ____| | | | | | \ / |_ __\ V / | |__) | __ ___ ____ _| |_ ___ | (___ | |__ ___| | | | |\/| | '__|> < | ___/ '__| \ \ / / _` | __/ _ \ \___ \| '_ \ / _ \ | | | | | | |_ / . \ | | | | | |\ V / (_| | || __/ ____) | | | | __/ | | |_| |_|_(_)_/ \_\ |_| |_| |_| \_/ \__,_|\__\___| |_____/|_| |_|\___V 2.1 if you need WebShell for Seo everyday contact me on Telegram Telegram Address : @jackleetFor_More_Tools:
a
" e�
� @ s� d dl T ddlmZ ddlmZ ddlmZmZ ddlm Z ddl
m Z m Z m
Z
mZ zddlmZ W n ddlmZ Y n0 G d d
� d
ej�ZG d d � d e�ZG d
d� de �ZG dd� de�ZG dd� de�ZG dd� de�Zddd�Ze dkr�e� � dS )� )�*� )�Tracer)�Rules)� Applications� Application)�AffectedProcess)�ProcessesCollection�PackagesCollection�ApplicationsCollection�AffectedProcessesCollection)�patchc @ s0 e Zd Zdd� Zeddd�dd� �Zdd � Zd
S ) � TestRulesc C s> t � t_tt� tttd�| _d| j_t� ddd�� t
t _ d S )N)�memoryi� ZkernelT)�name�ignore)
r r Z_appsr �PackageManagerMockr �dump_memory_mock�tracerZ timestampZ_append_application�
ProcessesMockr Zprocesses_factory��self� r �</usr/lib/python3.9/site-packages/tracer/tests/test_tracer.py�setUp s
zTestRules.setUpz0tracer.resources.applications.System.init_systemZdummy)Z return_valuec C s> | j �� }| �t|�tt�d�t�d�g�� | �|t� d S )N�baz�qux)r Ztrace_affectedZassertSetEqual�setr �find�assertIsInstancer )r Z init_system�affectedr r r �test_trace_affected s
$z TestRules.test_trace_affectedc C sV | j �t�d�t�}| �|t� | �t|�d� |d }| �|t � | �|j
d� d S )Nr r r � ) r Ztrace_applicationr r �AffectedProcessMockr r Z assertEqual�lenr �pid)r r �processr r r �test_trace_application s z TestRules.test_trace_applicationN)�__name__�
__module__� __qualname__r r
r! r' r r r r r s
r c @ sX e Zd Zdd� Zdd� Zedd� �Zedd� �Zed d
� �Zd d � Z d
d� Z
dd� Z dS )� ProcessMockc C s || _ || _|| _|| _d S �N)r% �files�_name� _create_time)r r% r � create_timer- r r r �__init__+ s zProcessMock.__init__c C s | j S r, �r. r r r r r 1 s zProcessMock.namec C s | j S r, r2 r r r r � real_name4 s zProcessMock.real_namec C s dS �NFr r r r r �is_interpreted8 s zProcessMock.is_interpretedc C s dS r4 r r r r r �
is_session< s zProcessMock.is_sessionc C s | j S r, )r/ r r r r r0 @ s zProcessMock.create_timec C s g S r, r r r r r �childrenC s zProcessMock.childrenc C s d S r, r r r r r �parentF s zProcessMock.parentN) r( r) r* r1 r �propertyr3 r5 r6 r0 r7 r8 r r r r r+ * s
r+ c @ s e Zd Zddd�ZdS )r# Nc C s || _ t� | _t� | _d S r, )r% r Zpackagesr- )r r% r r r r1 K s z AffectedProcessMock.__init__)N�r( r) r* r1 r r r r r# J s r# c @ s e Zd Zedd� �ZdS )r c
C sH t tdddg d��tdddg d��td d
d g d ��td
ddddg�g�S )N� ZfooiW ��file1Zfile2�file3� Zbari' �Zfile10Zfile11Zfile12r" r i
)�file7r= r> � r �a �file4�file9)r r+ r r r r �allS s �zProcessesMock.allN)r( r) r* � staticmethodrF r r r r r R s r c @ s e Zd Zdd� ZdS )� PackageMockc C s || _ || _|| _d S r, )r �modifiedr- )r r rI r- r r r r1 ^ s zPackageMock.__init__Nr: r r r r rH ] s rH c @ sX e Zd Zeddg d��eddg d��eddg d ��ed
d g d ��gZd
d� Zdd� ZdS )r �Ai
r< �Bi\ )rD Zfile5Zfile6�CrC )rA Zfile8rE �Di�" r@ c s t t� fdd�| j��S )Nc s
| j � kS r, )rI )�p�� unix_timer r �<lambda>m � z8PackageManagerMock.packages_newer_than.<locals>.<lambda>)r
�filter� _packages)r rP r rO r �packages_newer_thanl s z&PackageManagerMock.packages_newer_thanc C s$ | j D ]}|j|kr|j S qd S r, )rT r r- )r �pkg_name�packager r r �
package_fileso s
z PackageManagerMock.package_filesN)r( r) r* rH rT rU rX r r r r r d s �r Nc C sD i }t �� D ]2}|jD ]&}||v r2|| �|� q|g||< qq |S r, )r rF r- �append)�userr r& �filer r r r u s
r �__main__)N) Z__meta__Ztracer.resources.tracerr Ztracer.resources.rulesr Z tracer.resources.applicationsr r Ztracer.resources.processesr Z tracer.resources.collectionsr r
r r Z
unittest.mockr
ZmockZunittestZTestCaser �objectr+ r# r rH r r r( �mainr r r r �<module> s$