146 lines
6.4 KiB
SQL
146 lines
6.4 KiB
SQL
-- initialize entities
|
|
INSERT INTO namespace (id, name, version_format) VALUES
|
|
(1, 'debian:7', 'dpkg'),
|
|
(2, 'debian:8', 'dpkg'),
|
|
(3, 'fake:1.0', 'rpm');
|
|
|
|
INSERT INTO feature (id, name, version, version_format, type) VALUES
|
|
(1, 'ourchat', '0.5', 'dpkg', 1),
|
|
(2, 'openssl', '1.0', 'dpkg', 1),
|
|
(3, 'openssl', '2.0', 'dpkg', 1),
|
|
(4, 'fake', '2.0', 'rpm', 1),
|
|
(5, 'mount', '2.31.1-0.4ubuntu3.1', 'dpkg', 2);
|
|
|
|
INSERT INTO namespaced_feature(id, feature_id, namespace_id) VALUES
|
|
(1, 1, 1), -- ourchat 0.5, debian:7
|
|
(2, 2, 1), -- openssl 1.0, debian:7
|
|
(3, 2, 2), -- openssl 1.0, debian:8
|
|
(4, 3, 1); -- openssl 2.0, debian:7
|
|
|
|
INSERT INTO detector(id, name, version, dtype) VALUES
|
|
(1, 'os-release', '1.0', 'namespace'),
|
|
(2, 'dpkg', '1.0', 'feature'),
|
|
(3, 'rpm', '1.0', 'feature'),
|
|
(4, 'apt-sources', '1.0', 'namespace');
|
|
|
|
-- initialize layers
|
|
INSERT INTO layer (id, hash) VALUES
|
|
(1, 'layer-0'), -- blank
|
|
(2, 'layer-1'), -- debian:7; ourchat 0.5, openssl 1.0
|
|
(3, 'layer-2'), -- debian:7; ourchat 0.5, openssl 2.0
|
|
(4, 'layer-3a'),-- debian:7;
|
|
(5, 'layer-3b'),-- debian:8; ourchat 0.5, openssl 1.0
|
|
(6, 'layer-4'); -- debian:7, fake:1.0; openssl 2.0 (debian), fake 2.0 (fake)
|
|
|
|
INSERT INTO layer_namespace(id, layer_id, namespace_id, detector_id) VALUES
|
|
(1, 2, 1, 1), -- layer-1: debian:7
|
|
(2, 3, 1, 1), -- layer-2: debian:7
|
|
(3, 4, 1, 1), -- layer-3a: debian:7
|
|
(4, 5, 2, 1), -- layer-3b: debian:8
|
|
(5, 6, 1, 1), -- layer-4: debian:7
|
|
(6, 6, 3, 4); -- layer-4: fake:1.0
|
|
|
|
INSERT INTO layer_feature(id, layer_id, feature_id, detector_id) VALUES
|
|
(1, 2, 1, 2), -- layer-1: ourchat 0.5
|
|
(2, 2, 2, 2), -- layer-1: openssl 1.0
|
|
(3, 3, 1, 2), -- layer-2: ourchat 0.5
|
|
(4, 3, 3, 2), -- layer-2: openssl 2.0
|
|
(5, 5, 1, 2), -- layer-3b: ourchat 0.5
|
|
(6, 5, 2, 2), -- layer-3b: openssl 1.0
|
|
(7, 6, 4, 3), -- layer-4: fake 2.0
|
|
(8, 6, 3, 2); -- layer-4: openssl 2.0
|
|
|
|
INSERT INTO layer_detector(layer_id, detector_id) VALUES
|
|
(1, 1),
|
|
(2, 1),
|
|
(3, 1),
|
|
(4, 1),
|
|
(5, 1),
|
|
(6, 1),
|
|
(6, 4),
|
|
(1, 2),
|
|
(2, 2),
|
|
(3, 2),
|
|
(4, 2),
|
|
(5, 2),
|
|
(6, 2),
|
|
(6, 3);
|
|
|
|
INSERT INTO ancestry (id, name) VALUES
|
|
(1, 'ancestry-1'), -- layer-0, layer-1, layer-2, layer-3a
|
|
(2, 'ancestry-2'), -- layer-0, layer-1, layer-2, layer-3b
|
|
(3, 'ancestry-3'), -- layer-0
|
|
(4, 'ancestry-4'); -- layer-0
|
|
|
|
INSERT INTO ancestry_detector (ancestry_id, detector_id) VALUES
|
|
(1, 2),
|
|
(2, 2),
|
|
(1, 1),
|
|
(2, 1);
|
|
|
|
INSERT INTO ancestry_layer (id, ancestry_id, layer_id, ancestry_index) VALUES
|
|
-- ancestry-1: layer-0, layer-1, layer-2, layer-3a
|
|
(1, 1, 1, 0),(2, 1, 2, 1),(3, 1, 3, 2),(4, 1, 4, 3),
|
|
-- ancestry-2: layer-0, layer-1, layer-2, layer-3b
|
|
(5, 2, 1, 0),(6, 2, 2, 1),(7, 2, 3, 2),(8, 2, 5, 3),
|
|
-- ancestry-3: layer-1
|
|
(9, 3, 2, 0),
|
|
-- ancestry-4: layer-1
|
|
(10, 4, 2, 0);
|
|
|
|
-- assume that ancestry-3 and ancestry-4 are vulnerable.
|
|
INSERT INTO ancestry_feature (id, ancestry_layer_id, namespaced_feature_id, feature_detector_id, namespace_detector_id) VALUES
|
|
-- ancestry-1:
|
|
-- layer-2: ourchat 0.5 <- detected by dpkg 1.0 (2); debian: 7 <- detected by os-release 1.0 (1)
|
|
-- layer-2: openssl 2.0, debian:7
|
|
(1, 3, 1, 2, 1), (2, 3, 4, 2, 1),
|
|
-- ancestry 2:
|
|
-- 1(ourchat 0.5; debian:7 layer-2)
|
|
-- 3(openssl 1.0; debian:8 layer-3b)
|
|
(3, 7, 1, 2, 1), (4, 8, 3, 2, 1),
|
|
-- ancestry-3:
|
|
-- 2(openssl 1.0, debian:7 layer-1)
|
|
-- 1(ourchat 0.5, debian:7 layer-1)
|
|
(5, 9, 2, 2, 1), (6, 9, 1, 2, 1), -- vulnerable
|
|
-- ancestry-4:
|
|
-- same as ancestry-3
|
|
(7, 10, 2, 2, 1), (8, 10, 1, 2, 1); -- vulnerable
|
|
|
|
INSERT INTO vulnerability (id, namespace_id, name, description, link, severity) VALUES
|
|
(1, 1, 'CVE-OPENSSL-1-DEB7', 'A vulnerability affecting OpenSSL < 2.0 on Debian 7.0', 'http://google.com/#q=CVE-OPENSSL-1-DEB7', 'High'),
|
|
(2, 1, 'CVE-NOPE', 'A vulnerability affecting nothing', '', 'Unknown');
|
|
|
|
INSERT INTO vulnerability (id, namespace_id, name, description, link, severity, deleted_at) VALUES
|
|
(3, 1, 'CVE-DELETED', '', '', 'Unknown', '2017-08-08 17:49:31.668483');
|
|
|
|
INSERT INTO vulnerability_affected_feature(id, vulnerability_id, feature_name, affected_version, fixedin, feature_type) VALUES
|
|
(1, 1, 'openssl', '2.0', '2.0', 1),
|
|
(2, 1, 'libssl', '1.9-abc', '1.9-abc', 1);
|
|
|
|
INSERT INTO vulnerability_affected_namespaced_feature(id, vulnerability_id, namespaced_feature_id, added_by) VALUES
|
|
(1, 1, 2, 1);
|
|
|
|
INSERT INTO vulnerability_notification(id, name, created_at, notified_at, deleted_at, old_vulnerability_id, new_vulnerability_id) VALUES
|
|
(1, 'test', NULL, NULL, NULL, 2, 1); -- 'CVE-NOPE' -> 'CVE-OPENSSL-1-DEB7'
|
|
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('feature', 'id'), (SELECT MAX(id) FROM feature)+1);
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('namespace', 'id'), (SELECT MAX(id) FROM namespace)+1);
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('namespaced_feature', 'id'), (SELECT MAX(id) FROM namespaced_feature)+1);
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('detector', 'id'), (SELECT MAX(id) FROM detector)+1);
|
|
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('ancestry', 'id'), (SELECT MAX(id) FROM ancestry)+1);
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('ancestry_layer', 'id'), (SELECT MAX(id) FROM ancestry_layer)+1);
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('ancestry_feature', 'id'), (SELECT MAX(id) FROM ancestry_feature)+1);
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('ancestry_detector', 'id'), (SELECT MAX(id) FROM ancestry_detector)+1);
|
|
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('layer', 'id'), (SELECT MAX(id) FROM layer)+1);
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('layer_feature', 'id'), (SELECT MAX(id) FROM layer_feature)+1);
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('layer_namespace', 'id'), (SELECT MAX(id) FROM layer_namespace)+1);
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('layer_detector', 'id'), (SELECT MAX(id) FROM layer_detector)+1);
|
|
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('vulnerability', 'id'), (SELECT MAX(id) FROM vulnerability)+1);
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('vulnerability_affected_feature', 'id'), (SELECT MAX(id) FROM vulnerability_affected_feature)+1);
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('vulnerability_affected_namespaced_feature', 'id'), (SELECT MAX(id) FROM vulnerability_affected_namespaced_feature)+1);
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('vulnerability_notification', 'id'), (SELECT MAX(id) FROM vulnerability_notification)+1);
|
|
SELECT pg_catalog.setval(pg_get_serial_sequence('detector', 'id'), (SELECT MAX(id) FROM detector)+1);
|