Mirrors/inspec
2
0
Fork 0
mirror of https://github.com/inspec/inspec synced 2024-11-23 05:03:07 +00:00
Code Issues Projects Releases Packages Wiki Activity

bugfix: prevent any auth-method that is not configured + prevent interactive password login

Browse source 
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
This commit is contained in:
Dominik Richter 2015-06-27 15:47:45 +02:00
parent 34bc6a387c
commit 2e827fd699
1 changed files with 21 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

31
lib/utils/spec_helper.rb
View file

@ -22,22 +22,33 @@ if ENV['SSH_SPEC']
options = {}
c.sudo_password = ENV['SUDO_PASSWORD'] || ENV['sudo_password']
c.host = ENV['TARGET_HOST']
options[:password] = ENV['LOGIN_PASSWORD'] || ENV['password']
options[:user] = ENV['LOGIN_USERNAME'] || ENV['user'] || Etc.getlogin
options[:port] = ( ENV['LOGIN_PORT'] || 22 ).to_i
options[:auth_methods] = ["none"]
options[:global_known_hosts_file ] = "/dev/null"
options[:user_known_hosts_file ] = "/dev/null"
options[:number_of_password_prompts] = 0
if !ENV['LOGIN_KEY'].nil?
options[:keys] = [ENV['LOGIN_KEY']]
options[:keys_only] = true
end
# TODO: optional, will be removed
options[:user] = ENV['LOGIN_USERNAME'] || ENV['user'] || Etc.getlogin
if options[:user].nil?
raise 'specify a user for login via env LOGIN_USERNAME= or by adding user='
end
ssh_conf = Net::SSH::Config.for(c.host)
c.ssh_options = options.merge(ssh_conf)
options[:password] = ENV['LOGIN_PASSWORD'] || ENV['password']
if !options[:password].nil?
options[:auth_methods].push("password")
end
if !ENV['LOGIN_KEY'].nil?
options[:keys] = [ENV['LOGIN_KEY']]
options[:keys_only] = true
options[:auth_methods].push("publickey")
end
# Local alternative: use configuration from .ssh/config
# for the given host.
# ssh_conf = Net::SSH::Config.for(c.host)
# options.merge(ssh_conf)
c.ssh_options = options
end
# Run spec on Windows via WinRM