inspec/test/integration/default/controls/security_identifier_spec.rb

34 lines
871 B
Ruby
Raw Normal View History

unless os.windows?
$stderr.puts "\033[1;33mTODO: Not running #{__FILE__} because we are not on Windows.\033[0m"
return
end
describe security_identifier({ user: 'Administrator' }) do
it { should exist }
its('sid') { should match %r{S-1-5-21.+-500} }
end
describe security_identifier({ unspecified: 'Administrator' }) do
it { should exist }
its('sid') { should match %r{S-1-5-21.+-500} }
end
describe security_identifier({ group: 'Administrator' }) do
it { should_not exist }
its('sid') { should be nil }
end
describe security_identifier({ group: 'Administrators' }) do
its('sid') { should eq 'S-1-5-32-544' }
end
describe security_identifier({ unspecified: 'Administrators' }) do
its('sid') { should eq 'S-1-5-32-544' }
end
describe security_identifier({ user: 'Administrators' }) do
it { should_not exist }
its('sid') { should be nil }
end