2015-09-20 16:32:50 +00:00
# encoding: utf-8
2015-10-06 16:55:44 +00:00
# author: Christoph Hartmann
# author: Dominik Richter
2015-09-20 16:32:50 +00:00
# license: All rights reserved
2016-03-08 18:06:55 +00:00
module Inspec::Resources
class KernelModule < Inspec . resource ( 1 )
name 'kernel_module'
desc 'Use the kernel_module InSpec audit resource to test kernel modules on Linux platforms. These parameters are located under /lib/modules. Any submodule may be tested using this resource.'
example "
describe kernel_module ( 'bridge' ) do
it { should be_loaded }
end
"
2015-09-20 16:32:50 +00:00
2016-03-08 18:06:55 +00:00
def initialize ( modulename = nil )
@module = modulename
2015-09-20 16:32:50 +00:00
2016-03-08 18:06:55 +00:00
# this resource is only supported on Linux
return skip_resource 'The `kernel_parameter` resource is not supported on your OS.' if ! inspec . os . linux?
end
2015-09-20 16:32:50 +00:00
2016-03-08 18:06:55 +00:00
def loaded?
# default lsmod command
lsmod_cmd = 'lsmod'
# special care for CentOS 5 and sudo
2016-08-03 17:18:24 +00:00
lsmod_cmd = '/sbin/lsmod' if inspec . os [ :name ] == 'centos' && inspec . os [ :release ] . to_i == 5
2015-10-23 11:57:37 +00:00
2016-03-08 18:06:55 +00:00
# get list of all modules
cmd = inspec . command ( lsmod_cmd )
return false if cmd . exit_status != 0
2015-09-20 16:32:50 +00:00
2016-03-08 18:06:55 +00:00
# check if module is loaded
re = Regexp . new ( '^' + Regexp . quote ( @module ) + '\s' )
found = cmd . stdout . match ( re )
! found . nil?
end
2015-09-20 16:32:50 +00:00
2016-03-08 18:06:55 +00:00
def to_s
" Kernel Module #{ @module } "
end
2015-09-20 16:32:50 +00:00
end
end