package hubtest import ( "fmt" "os" "path/filepath" "strings" log "github.com/sirupsen/logrus" "github.com/crowdsecurity/crowdsec/pkg/cwhub" ) func (t *HubTestItem) installAppsecRuleItem(hubAppsecRule *cwhub.Item) error { appsecRuleSource, err := filepath.Abs(filepath.Join(t.HubPath, hubAppsecRule.RemotePath)) if err != nil { return fmt.Errorf("can't get absolute path of '%s': %s", appsecRuleSource, err) } appsecRuleFilename := filepath.Base(appsecRuleSource) // runtime/hub/appsec-rules/author/appsec-rule hubDirAppsecRuleDest := filepath.Join(t.RuntimeHubPath, filepath.Dir(hubAppsecRule.RemotePath)) // runtime/appsec-rules/ appsecRuleDirDest := fmt.Sprintf("%s/appsec-rules/", t.RuntimePath) if err := os.MkdirAll(hubDirAppsecRuleDest, os.ModePerm); err != nil { return fmt.Errorf("unable to create folder '%s': %s", hubDirAppsecRuleDest, err) } if err := os.MkdirAll(appsecRuleDirDest, os.ModePerm); err != nil { return fmt.Errorf("unable to create folder '%s': %s", appsecRuleDirDest, err) } // runtime/hub/appsec-rules/crowdsecurity/rule.yaml hubDirAppsecRulePath := filepath.Join(appsecRuleDirDest, appsecRuleFilename) if err := Copy(appsecRuleSource, hubDirAppsecRulePath); err != nil { return fmt.Errorf("unable to copy '%s' to '%s': %s", appsecRuleSource, hubDirAppsecRulePath, err) } // runtime/appsec-rules/rule.yaml appsecRulePath := filepath.Join(appsecRuleDirDest, appsecRuleFilename) if err := os.Symlink(hubDirAppsecRulePath, appsecRulePath); err != nil { if !os.IsExist(err) { return fmt.Errorf("unable to symlink appsec-rule '%s' to '%s': %s", hubDirAppsecRulePath, appsecRulePath, err) } } return nil } func (t *HubTestItem) installAppsecRuleCustom(appsecrule string) error { customAppsecRuleExist := false for _, customPath := range t.CustomItemsLocation { // we check if its a custom appsec-rule customAppsecRulePath := filepath.Join(customPath, appsecrule) if _, err := os.Stat(customAppsecRulePath); os.IsNotExist(err) { continue } customAppsecRulePathSplit := strings.Split(customAppsecRulePath, "/") customAppsecRuleName := customAppsecRulePathSplit[len(customAppsecRulePathSplit)-1] appsecRuleDirDest := fmt.Sprintf("%s/appsec-rules/", t.RuntimePath) if err := os.MkdirAll(appsecRuleDirDest, os.ModePerm); err != nil { return fmt.Errorf("unable to create folder '%s': %s", appsecRuleDirDest, err) } // runtime/appsec-rules/ customAppsecRuleDest := fmt.Sprintf("%s/appsec-rules/%s", t.RuntimePath, customAppsecRuleName) // if path to postoverflow exist, copy it if err := Copy(customAppsecRulePath, customAppsecRuleDest); err != nil { continue } customAppsecRuleExist = true break } if !customAppsecRuleExist { return fmt.Errorf("couldn't find custom appsec-rule '%s' in the following location: %+v", appsecrule, t.CustomItemsLocation) } return nil } func (t *HubTestItem) installAppsecRule(name string) error { log.Debugf("adding rule '%s'", name) if item := t.HubIndex.GetItem(cwhub.APPSEC_RULES, name); item != nil { return t.installAppsecRuleItem(item) } return t.installAppsecRuleCustom(name) }