Add integration test to check Valgrind memory report on FIM

[jesusjimsa]

Description

The test must execute Valgrind on the ossec-syscheckd executable to check that there are no memory leaks or segmentation faults. When running Valgrind, all the possible operations must be performed but the test doesn't have to check that these operations are performed correctly, only the memory is being tested. The goal is to test as much code as possible.

This test is part of tier 2.

Valgrind output example

For the test to pass, Valgrind output should look like this:

==26625== LEAK SUMMARY:
==26625==    definitely lost: 0 bytes in 0 blocks
==26625==    indirectly lost: 0 bytes in 0 blocks
==26625==      possibly lost: 0 bytes in 0 blocks
==26625==    still reachable: 11,089 bytes in 41 blocks
==26625==         suppressed: 0 bytes in 0 blocks
==26625== Reachable blocks (those to which a pointer was found) are not shown.
==26625== To see them, rerun with: --leak-check=full --show-leak-kinds=all

Platforms

• Linux
• Solaris

  valgrind --leak-check=yes /var/ossec/bin/ossec-syscheckd

• macOS

  valgrind --leak-check=yes /Library/Ossec/bin/ossec-syscheckd

[jesusjimsa]

Cases to test

• check_all & tags & restrict & recursion_level & report_changes
  • Add
  • Modify
  • Delete
• ignore
  • Add
  • Modify
  • Delete
• Rename file
• Follow symbolic link
  • Add
  • Modify
  • Delete
  • Change target
• Rename monitored folder (only realtime)
• report_changes & nodiff

All cases must be tested in scheduled, realtime and whodata except when otherwise stated. Again, no correctness is being tested, only memory.

Examples of configuration

• check_all & tags & restrict & recursion_level & report_changes

  <directories tags="example" restrict=".restricted$" recursion_level="4" report_changes="yes">/testdir1</directories>

• ignore

  <directories>/testdir1</directories>
  <ignore type="sregex">.ignored$</ignore>

• Rename file

  <directories>/testdir1</directories>

• Follow symbolic link

  <directories follow_symbolic_link="yes">/testdir1/symbolic_link</directories>

• Rename monitored folder

  <directories>/testdir1</directories>

• report_changes & nodiff

  <directories report_changes="yes">/testdir1</directories>
  <nodiff type="sregex">.nodiff$</nodiff>

[jesusjimsa]

Synchronization must also be performed in, at least, one case and database partition. For database partition, the test needs to create enough files.