Dominik Richter
6e548364f4
bugfix: dont skip controls during json generation
2015-11-03 01:10:05 +01:00
Dominik Richter
ea66947b36
dont warn on command not existing on mock backend
2015-11-03 00:35:45 +01:00
Dominik Richter
6e8c4f02a1
fix typo
2015-11-03 00:35:45 +01:00
Christoph Hartmann
9d32bc7f81
improvement: fail properly if os is not supported
2015-11-02 22:58:20 +00:00
Christoph Hartmann
b1153685a4
bugfix: relax fail for command.exist? for inspec check command
2015-11-02 22:52:04 +00:00
Dominik Richter
7a07c02b4d
alias rule instead of recreating it
2015-11-02 22:43:20 +01:00
Dominik Richter
ccabe55608
api: change require/include_rules -> require/include_controls
2015-11-02 22:26:20 +01:00
Dominik Richter
f976730a27
api: make control the default keyword
2015-11-02 22:26:20 +01:00
Dominik Richter
9aec339d9f
disable class length metrics on profile context for now
2015-11-02 17:47:04 +01:00
Dominik Richter
de8437caa6
feature: introduce group title for files
2015-11-02 17:31:56 +01:00
Dominik Richter
93ee171dfa
bugfix: use full path when resolving files
2015-11-02 16:43:39 +01:00
Dominik Richter
31d42b0212
lint: ignore line length on runner for now
2015-11-02 15:06:48 +01:00
Dominik Richter
421d7ecaa9
feature: auto-load libraries in profiles
2015-11-02 15:06:48 +01:00
Dominik Richter
f410ee3dba
simplify folder resolver
2015-11-02 15:06:48 +01:00
Dominik Richter
22bf549e0b
api: change library loading from /lib -> /libraries
2015-11-02 15:06:48 +01:00
Christoph Hartmann
d470803c37
improve command.exist? for more operating systems
2015-11-02 12:06:42 +01:00
Dominik Richter
13a6538acf
temporarily disable rubocop metric on profile
2015-11-02 10:06:35 +01:00
Christoph Hartmann
ea47c5add8
use new internal structure for inspect check
2015-11-02 09:59:15 +01:00
Christoph Hartmann
4a676f55c3
remove dup method users, use usernames, fix example
2015-11-02 00:22:08 +01:00
Dominik Richter
d328919370
simplify resiliance
2015-11-01 23:48:29 +01:00
Christoph Hartmann
cdab39079a
improvement: make os_env command more robust
2015-11-01 23:22:01 +01:00
Christoph Hartmann
1be689b77e
remove exit_status and only call split if we have a string
2015-11-01 23:21:08 +01:00
Christoph Hartmann
324fa4881f
do not offer stderr method via os_env
2015-11-01 23:14:12 +01:00
Christoph Hartmann
1941606b9e
deactivate group policy for now
2015-11-01 22:39:30 +01:00
Christoph Hartmann
9e53556379
fix os_env example
2015-10-31 11:55:10 +01:00
Dominik Richter
24451469ca
api: method_missing doesnt resolve hashmaps
...
Since #its has its(pun) own way of handling calls with a dot-notation, the full call is never passed to the resource. For example:
```ruby
describe json('file') do
its('a.b.c') { should eq 123 }
end
```
This is resolved to calling `json('file').a.b.c` and thus doesnt work as an intended `json('file').send('a.b.c'). For now use
regular its-behavior of calling `json('file').params ... its(%w{a b c}) { should ... }`.
Its' behavior must be improved.
2015-10-27 16:35:43 +01:00
Dominik Richter
8daf8dfa86
lint
2015-10-27 03:07:38 +01:00
Dominik Richter
59a8ca6639
construct profile in legacy structure
...
This is a temporary commit to achieve compliance with other components. It will be overturned before the final release.
2015-10-27 02:29:11 +01:00
Dominik Richter
5720aa3294
bugfix: detect filename+line for all example blocks
2015-10-27 02:29:11 +01:00
Dominik Richter
32e5e3ec29
move to symbols-based fields in profile params
2015-10-27 02:29:11 +01:00
Christoph Hartmann
cdb30c356f
add apache base config
2015-10-27 02:20:29 +01:00
Dominik Richter
b280203d03
consistently set an empty logger in non-verbose mode
2015-10-26 18:27:46 +01:00
Dominik Richter
471a723b83
restore parse_passwd_line to be public, thanks @chris-rock
2015-10-26 17:16:05 +01:00
Dominik Richter
d5973d1189
bugfix: harmonize postgres session handling
2015-10-26 16:59:46 +01:00
Dominik Richter
e76b83a24e
bugfix: mysql conf and session handling
2015-10-26 16:58:42 +01:00
Dominik Richter
5485111907
bugfix: support missing conf path for postgres_conf
2015-10-26 16:50:49 +01:00
Dominik Richter
414bf6b1fa
bugfix: handle empty processes result
2015-10-26 16:49:26 +01:00
Dominik Richter
ec6d1e680a
support postgres_session resource
2015-10-26 16:47:45 +01:00
Dominik Richter
ee0e9fc7c1
mock outer dsl attributes method
2015-10-26 16:44:20 +01:00
Dominik Richter
1613add894
bugfix: group policy needs a name for init
2015-10-26 16:40:21 +01:00
Dominik Richter
6dc0a3b638
rename inetd_config -> inetd_conf
...
be consistent with the filename
2015-10-26 16:21:51 +01:00
Dominik Richter
0ac3c412aa
bugfix: support empty content in simpleconfig
2015-10-26 16:16:42 +01:00
Dominik Richter
03fe892899
bugfix: handle empty parseconfig options
2015-10-26 16:13:48 +01:00
Dominik Richter
69be6acae8
bugfix: fail on missing access to /etc/group
2015-10-26 16:11:28 +01:00
Dominik Richter
95242bf9c2
add content parser tests
2015-10-26 15:50:57 +01:00
Dominik Richter
9d1dcef469
bugfix: remove '/' prefix from folder
2015-10-26 13:06:44 +01:00
Dominik Richter
090281fb0b
lint
2015-10-26 12:34:35 +01:00
Dominik Richter
b58a4b3f43
rename vulcanosec -> inspec
2015-10-26 12:34:15 +01:00
Christoph Hartmann
4bcfc76f27
simplify auditd name
2015-10-26 12:15:29 +01:00
Dominik Richter
05eb8df687
lint
2015-10-26 12:09:43 +01:00
Dominik Richter
76f7282e2c
add yard header to profile#check
2015-10-26 12:07:03 +01:00
Dominik Richter
83082b2e7b
feature: bring back profile check
2015-10-26 11:58:41 +01:00
Dominik Richter
b0bef37b06
support chef audit folder structure
2015-10-26 11:53:09 +01:00
Dominik Richter
9c1f258707
dont fail on missing rule body source
2015-10-26 11:46:43 +01:00
Dominik Richter
9703f3c747
bugfix: provide source code for rules in json
2015-10-26 11:46:43 +01:00
Dominik Richter
80b8b319d9
api: auto-include library files for inspec profile
2015-10-26 11:46:43 +01:00
Dominik Richter
07e3d749be
skip empty file content
2015-10-26 11:46:43 +01:00
Dominik Richter
8f0c9c890e
bugfix: fix path prefix in folder resolution
2015-10-26 11:46:43 +01:00
Dominik Richter
73b7b3c99a
bugfix: point to metadata.rb instead of vmetadata.rb
2015-10-26 11:46:43 +01:00
Dominik Richter
45f7057f30
lint
2015-10-26 04:39:16 +01:00
Dominik Richter
c326e08739
remove old verify code
2015-10-26 00:35:18 +01:00
Dominik Richter
93b4db01ca
add rules to profile information
2015-10-26 00:35:18 +01:00
Dominik Richter
a62ce0e14b
create json from profile metadata
2015-10-26 00:35:18 +01:00
Christoph Hartmann
24e23f3db4
bugfix: fix regular expression for apt
2015-10-25 22:32:50 +01:00
Christoph Hartmann
b7777d265e
improve fail warning. thanks @arlimus
2015-10-25 21:47:27 +01:00
Christoph Hartmann
d75e16546c
improvement: file resource check precondition and add file permission check
2015-10-25 21:35:35 +01:00
Christoph Hartmann
98d5a40686
generalize matcher
2015-10-25 21:33:36 +01:00
Christoph Hartmann
3c76ed6e37
integration test for file
2015-10-24 11:15:53 +02:00
Christoph Hartmann
25783ea283
fail with warning, if users use contain matcher
2015-10-24 11:15:53 +02:00
Christoph Hartmann
a407e3b6ce
bugfix: parse " with apt urls
2015-10-24 11:15:52 +02:00
Christoph Hartmann
0bbb70302d
bugfix: fix kernel_module in combination with CentOS 5 & sudo
2015-10-23 13:57:37 +02:00
Christoph Hartmann
66a2be7f33
improvement: add complete linux support for kernel_module
2015-10-23 13:57:03 +02:00
Christoph Hartmann
4574c07954
improvement: support all linux os for kernel_parameter
2015-10-23 13:30:14 +02:00
Christoph Hartmann
c177a511fa
add opensuse support for user resource
2015-10-23 12:14:00 +02:00
Christoph Hartmann
20afebc1a6
improvement: support package for opensuse
2015-10-23 12:14:00 +02:00
Christoph Hartmann
022ec31529
bugfix: rpm does not return exit code if package is not available, work around that
2015-10-23 12:14:00 +02:00
Christoph Hartmann
86bdb9903b
bugfix: only return true and false for package installed?
2015-10-23 12:14:00 +02:00
Christoph Hartmann
773bd0e971
improvement: add opensuse support for service resource
2015-10-23 12:14:00 +02:00
Christoph Hartmann
28c497a492
bugfix: support for sudo and service on debian
2015-10-23 12:14:00 +02:00
Christoph Hartmann
807ee03e8b
bugfix: fix regular expression to detect services on freebsd
2015-10-23 12:14:00 +02:00
Christoph Hartmann
eca6476ced
bugfix: use absolute path for SysV service to work well with sudo on CentOS 5
2015-10-23 12:14:00 +02:00
Christoph Hartmann
836697585b
bugfix: Ubuntu 10.04 initctl does not support show-config
2015-10-23 12:14:00 +02:00
Christoph Hartmann
579e465b88
0.8.0
2015-10-21 21:49:07 +02:00
Christoph Hartmann
e3cc942f60
bugfix: always return false instead of nil in case a service could not be determined
2015-10-21 20:54:46 +02:00
Christoph Hartmann
3d2bca2eaf
add centos support to service resource
2015-10-21 20:54:46 +02:00
Christoph Hartmann
571de7fc68
fix typos in os skip message
2015-10-21 20:54:46 +02:00
Christoph Hartmann
17279f9ef8
add centos support
2015-10-21 20:54:46 +02:00
Christoph Hartmann
20bbb4c960
add more usage headers
2015-10-21 19:30:01 +02:00
Christoph Hartmann
035e39ee8c
simplify yum implementation
2015-10-20 19:57:00 +02:00
Dominik Richter
cea48ceb5a
remove leftover comments
2015-10-19 12:07:14 +02:00
Dominik Richter
20dae26925
split methods for processing rules and checks after loading
2015-10-19 09:49:40 +02:00
Dominik Richter
08707eb2d2
temporarily attach the dsl to all example objects
...
TODO: Remove this!! It is very dangerous to do this here. The goal of this is to make the audit DSL available to all describe blocks. Right now, these blocks are executed outside the scope of this run, thus not gaining ony of the DSL pieces. To circumvent this, the full DSL is attached to the examples
2015-10-18 19:50:12 +02:00
Dominik Richter
d66f874e1c
feature: support expect keyword in rules
2015-10-18 19:14:22 +02:00
Dominik Richter
2cebd3fc31
allow loading without file and line info
...
i.e. dynamic loading only
2015-10-18 19:11:56 +02:00
Dominik Richter
c6cc45c28e
bugfix: add rspec core dsl to profile context
2015-10-18 19:11:56 +02:00
Christoph Hartmann
89f003f61b
bugfix: add missing uri import
2015-10-17 19:33:52 +02:00
Dominik Richter
c01e1f2c74
lint: make sure variables are defined
2015-10-17 00:03:41 +02:00
Dominik Richter
df07e768d0
lint: replace obsolete URI.regexp
2015-10-17 00:03:37 +02:00
Dominik Richter
9224d5db58
bugfix: support ruby 1.9.3
2015-10-15 23:28:37 +02:00
Dominik Richter
56b88cba1d
create factory for backend creation
2015-10-15 22:42:06 +02:00