Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RFE: filter_exclude search by syscall/key, syncmarker fix, comments #102

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

rgbriggs
Copy link
Member

  • Add key and syscall to exit list rules.
  • Update 2nd syncmarker search.
  • Add comments to each check.

See: #58

Signed-off-by: Richard Guy Briggs [email protected]


Rebased on #96

…ments

- Add key and syscall to exit list rules.
- Update 2nd syncmarker search.
- Add comments to each check.

See: linux-audit#58

Signed-off-by: Richard Guy Briggs <[email protected]>

---
Rebased on linux-audit#96
@@ -69,55 +69,55 @@ $subj_clr = $subj_sen unless defined $subj_clr;
# try adding rule for each supported field type and test for (a few)
# unsupported types
$result = system("auditctl -a exclude,always -F msgtype=$msgtype");
ok( $result, 0 );
ok( $result, 0 ); # add msgtype ok?
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please don't do this; the operation which is being checked is the line directly above this one. This is comment noise and it detracts from other comments in the test suite.

This applies to all the other similar comments you've added in this PR; please remove them and leave the code as-is.

@rgbriggs
Copy link
Member Author

rgbriggs commented Mar 15, 2021 via email

@pcmoore
Copy link
Member

pcmoore commented Mar 15, 2021

"Please don't do this."

@pcmoore
Copy link
Member

pcmoore commented Mar 15, 2021

Let me add to this, I think it is a good thing to have people look at the test source when the test fails; I actually would encourage that in most cases. This is one of the reasons why I've fought against a lot of the overly verbose output, "debugging" messages, etc.

@pcmoore
Copy link
Member

pcmoore commented Dec 30, 2021

Hi @rgbriggs, I'm just checking in on this PR; are you planning to make the requested change above?

Copy link
Member

@pcmoore pcmoore left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See comment #102 (comment)

@pcmoore pcmoore changed the title tests: filter_exclude: search by syscall/key, syncmarker fix, comments RFE: filter_exclude search by syscall/key, syncmarker fix, comments Aug 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants