mirror of
https://github.com/inspec/inspec
synced 2024-12-24 03:53:15 +00:00
24 lines
1.1 KiB
Ruby
24 lines
1.1 KiB
Ruby
|
case os[:family]
|
||
|
|
when 'ubuntu', 'fedora', 'debian', 'suse'
|
||
|
|
describe ip6tables do
|
||
|
|
it { should have_rule('-A INPUT -i eth0 -p tcp -m tcp --dport 80 -m state --state NEW -m comment --comment "http v6 on 80" -j ACCEPT') }
|
||
|
|
it { should_not have_rule('-A INPUT -i eth1 -p tcp -m tcp --dport 80 -j ACCEPT') }
|
||
|
|
|
||
|
|
# single-word comments have their quotes dropped
|
||
|
|
it { should have_rule('-A derby-cognos-web-v6 -p tcp -m tcp --dport 80 -m comment --comment derby-cognos-web-v6 -j ACCEPT') }
|
||
|
|
end
|
||
|
|
when 'redhat', 'centos'
|
||
|
|
describe ip6tables do
|
||
|
|
it { should have_rule('-A INPUT -i eth0 -p tcp -m tcp --dport 80 -m state --state NEW -m comment --comment "http v6 on 80" -j ACCEPT') }
|
||
|
|
it { should_not have_rule('-A INPUT -i eth1 -p tcp -m tcp --dport 80 -j ACCEPT') }
|
||
|
|
end
|
||
|
|
|
||
|
|
describe ip6tables do
|
||
|
|
it { should have_rule('-A derby-cognos-web-v6 -p tcp -m tcp --dport 80 -m comment --comment "derby-cognos-web-v6" -j ACCEPT') }
|
||
|
|
end if os[:release] == 6
|
||
|
|
|
||
|
|
describe ip6tables do
|
||
|
|
it { should have_rule('-A derby-cognos-web-v6 -p tcp -m tcp --dport 80 -m comment --comment derby-cognos-web-v6 -j ACCEPT') }
|
||
|
|
end if os[:release] == 7
|
||
|
|
end
|