(image, volatility, python)
| 249 | |
| 250 | |
| 251 | def test_mac_check_syscall(image, volatility, python): |
| 252 | rc, out, _err = runvol_plugin( |
| 253 | "mac.check_syscall.Check_syscall", image, volatility, python |
| 254 | ) |
| 255 | out = out.lower() |
| 256 | |
| 257 | assert out.find(b"chmod") != -1 |
| 258 | assert out.find(b"chown") != -1 |
| 259 | assert out.find(b"nosys") != -1 |
| 260 | assert out.count(b"\n") > 100 |
| 261 | assert rc == 0 |
| 262 | |
| 263 | |
| 264 | def test_mac_check_sysctl(image, volatility, python): |
nothing calls this directly
no test coverage detected