database/openGauss-server
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add test case hw_audit_pg_query

Browse Source 
Offering: openGaussDev

More detail:add test case hw_audit_pg_query

Match-id-08b44df1f068d35498a10f3748a471204a7f16d8
This commit is contained in:
openGaussDev
2022-03-09 17:18:45 +08:00
committed by yanghao
parent 930a83f2b5
commit 9924ecb026
4 changed files with 79 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

0
src/test/regress/expected/hw_audit_multi_thread_rotation_interval.out Normal file
View File

30
src/test/regress/input/hw_audit_pg_query.source Normal file
View File

@ -0,0 +1,30 @@
-- 显示允许审计日志记录状态
show audit_enabled;
-- 修改guc参数 允许审计日志记录状态设为off 重启
\! @abs_bindir@/gs_guc reload -Z datanode -D @abs_srcdir@/tmp_check/datanode1 -c "audit_enabled=off" > /dev/null 2>&1
-- 重启数据库 等待1s
select pg_sleep(1);
\! @abs_bindir@/gs_ctl stop -D @abs_srcdir@/tmp_check/datanode1 > /dev/null 2>&1
\! @abs_bindir@/gs_ctl start -D @abs_srcdir@/tmp_check/datanode1 > /dev/null 2>&1
\! sleep 5
-- 显示允许审计日志记录状态
\! @abs_bindir@/gsql -r -p @portstring@ -d postgres -c "show audit_enabled";
-- 在审计日志记录关闭状态下 新建用户
\! @abs_bindir@/gsql -r -p @portstring@ -d postgres -c "CREATE USER test_pg_query PASSWORD 'test_pwd@123'";
-- 查询审计日志 create user
\! @abs_bindir@/gsql -r -p @portstring@ -d postgres -c "select object_name,detail_info from pg_query_audit('2002-03-09 00:00:00','2032-03-09 24:00:00') where detail_info like 'CREATE USER%'";
-- 恢复guc参数 审计日志记录状态 重启
\! @abs_bindir@/gs_guc reload -Z datanode -D @abs_srcdir@/tmp_check/datanode1 -c "audit_enabled" > /dev/null 2>&1
\! sleep 1
\! @abs_bindir@/gs_ctl stop -D @abs_srcdir@/tmp_check/datanode1 > /dev/null 2>&1
\! @abs_bindir@/gs_ctl start -D @abs_srcdir@/tmp_check/datanode1 > /dev/null 2>&1
\! sleep 5
-- 显示允许审计日志记录状态
\! @abs_bindir@/gsql -r -p @portstring@ -d postgres -c "show audit_enabled";

48
src/test/regress/output/hw_audit_pg_query.source Normal file
View File

@ -0,0 +1,48 @@
-- 显示允许审计日志记录状态
show audit_enabled;
audit_enabled
---------------
on
(1 row)
-- 修改guc参数 允许审计日志记录状态设为off 重启
\! @abs_bindir@/gs_guc reload -Z datanode -D @abs_srcdir@/tmp_check/datanode1 -c "audit_enabled=off" > /dev/null 2>&1
-- 重启数据库 等待1s
select pg_sleep(1);
pg_sleep
----------
(1 row)
\! @abs_bindir@/gs_ctl stop -D @abs_srcdir@/tmp_check/datanode1 > /dev/null 2>&1
\! @abs_bindir@/gs_ctl start -D @abs_srcdir@/tmp_check/datanode1 > /dev/null 2>&1
\! sleep 5
-- 显示允许审计日志记录状态
\! @abs_bindir@/gsql -r -p @portstring@ -d postgres -c "show audit_enabled";
audit_enabled
---------------
off
(1 row)
-- 在审计日志记录关闭状态下 新建用户
\! @abs_bindir@/gsql -r -p @portstring@ -d postgres -c "CREATE USER test_pg_query PASSWORD 'test_pwd@123'";
CREATE ROLE
-- 查询审计日志 create user
\! @abs_bindir@/gsql -r -p @portstring@ -d postgres -c "select object_name,detail_info from pg_query_audit('2002-03-09 00:00:00','2032-03-09 24:00:00') where detail_info like 'CREATE USER%'";
object_name | detail_info
-------------+-------------
(0 rows)
-- 恢复guc参数 审计日志记录状态 重启
\! @abs_bindir@/gs_guc reload -Z datanode -D @abs_srcdir@/tmp_check/datanode1 -c "audit_enabled" > /dev/null 2>&1
\! sleep 1
\! @abs_bindir@/gs_ctl stop -D @abs_srcdir@/tmp_check/datanode1 > /dev/null 2>&1
\! @abs_bindir@/gs_ctl start -D @abs_srcdir@/tmp_check/datanode1 > /dev/null 2>&1
\! sleep 5
-- 显示允许审计日志记录状态
\! @abs_bindir@/gsql -r -p @portstring@ -d postgres -c "show audit_enabled";
audit_enabled
---------------
on
(1 row)

2
src/test/regress/security_audit_schedule0
View File

@ -1,10 +1,10 @@
# ------------------
# # Database security audit
# # ---------------
test: hw_audit_pg_query
test: hw_audit_space
test: hw_audit_rotation_interval
test: hw_audit_rotation_size
#--------------------
# # Multi thread
#-------------------