Mirrors/inspec
2
0
Fork 0
mirror of https://github.com/inspec/inspec synced 2024-12-18 09:03:12 +00:00
Code Issues Projects Releases Packages Wiki Activity
827 commits 457 branches 1906 tags 76 MiB
Commit graph

275 commits

Author SHA1 Message Date
Dominik Richter
554accdedc reimplement command resource 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-28 16:08:24 -07:00
Dominik Richter
e0459c4116 migrate all of audit 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-28 16:04:52 -07:00
Dominik Richter
2a8b8d3394 migrate env and apache conf 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-28 13:02:18 -07:00
Dominik Richter
dddc9daed0 migrated inetd config and etc group 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-28 12:52:59 -07:00
Dominik Richter
2103a4485b migrate limits and login defs 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-28 12:47:37 -07:00
Dominik Richter
8004d6f129 migrate all mysql resources 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-28 12:41:48 -07:00
Dominik Richter
1a45f32f0b migrated all postgres resources 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-28 12:37:03 -07:00
Dominik Richter
83d846ac7f migrate ntp conf and parse_config 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-28 12:32:17 -07:00
Dominik Richter
d9d67e943a migrate passwd and processes 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-28 12:27:35 -07:00
Dominik Richter
dc0f61a0ef migrate registry_key + security_policy 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-28 11:52:22 -07:00
Dominik Richter
d7bcf6dfea move resource plugin to vulcano/plugins 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-28 11:49:21 -07:00
Dominik Richter
2c2d2d8d27 rename resources -> tests in the context of runner 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-28 10:13:05 -07:00
Dominik Richter
3bf8037638 move to a simpler plugin structure 
This has been inspired in its calling structure by the wonderful work done in Vagrant. Kudos to all contributors!

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-28 10:10:03 -07:00
Dominik Richter
90a2d45462 create new pluggable profile context 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-27 13:59:58 -07:00
Dominik Richter
a1af0ad24b start mock backend and change backend mechanics 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-27 13:59:15 -07:00
Dominik Richter
7e1f9b8a15 move resources lib 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-27 13:58:07 -07:00
Dominik Richter
38a99c065a 0.6.1 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-24 14:25:29 -07:00
Dominik Richter
22ce1d4b0d add docker backend support 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-24 10:35:03 -07:00
Dominik Richter
8c82bca280 bugfix: skip resources with message 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-13 23:22:56 -07:00
Dominik Richter
1890ba9226 bugfix: correctly detect code line of block 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-13 22:51:53 -07:00
Dominik Richter
75c30d9892 bugfix: remove unnecessary only_if outer definition 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-13 22:36:50 -07:00
Dominik Richter
90ed1aed99 fix missing require winrm 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 23:45:32 -07:00
Dominik Richter
6360bf825f fix wrong variable ref 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 23:39:12 -07:00
Dominik Richter
83432ccfb4 fix typo 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 23:31:47 -07:00
Dominik Richter
225b49fbd2 0.6.0 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 22:47:29 -07:00
Dominik Richter
5875864f45 move zip and tar helpers 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 22:45:42 -07:00
Dominik Richter
7a59d9ce76 feature: start github uri reader 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 22:34:37 -07:00
Christoph Hartmann
9065eaa35c add zip and tar helper 2015-08-12 21:14:48 -07:00
Dominik Richter
61794072e5 generalize folder handling 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 20:47:02 -07:00
Dominik Richter
9f0b6ebc46 add targets for chef-audit and serverspec 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 19:19:36 -07:00
Dominik Richter
6e4381f2d4 turn backend into a separate object 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 19:07:01 -07:00
Dominik Richter
9ba4fb1d00 add configurable targets and backends 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 18:48:17 -07:00
Dominik Richter
cecd86a119 improvement: unify ID generation for all tests 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 17:29:23 -07:00
Dominik Richter
7f67a088cb feature: --target option for scans 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 17:05:32 -07:00
Dominik Richter
5b0f5252c6 shorten anonymous describe IDs 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 15:17:18 -07:00
Dominik Richter
116a9b46d8 run multiple files by aggregating results 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 15:16:50 -07:00
Dominik Richter
360da9a7ba feature: configure ssh+winrm targets on CLI-runner 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 14:19:44 -07:00
Dominik Richter
33043dd6a1 feature: run tests from cli 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-08-12 12:03:41 -07:00
Your Name
0108ab2c75 simplify ruby source block detection 
Signed-off-by: Your Name <your.name@email.com>
 2015-08-09 20:31:51 +00:00
Your Name
39343367c2 feature: include rule code in json 
Signed-off-by: Your Name <your.name@email.com>
 2015-08-09 18:29:59 +00:00
Dominik Richter
1b9997b204 bugfix: work around embedded only_if conditionals 
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
 2015-06-21 22:52:40 +02:00
Dominik Richter
5d5b945933 feature: only_if for profiles added 
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
 2015-06-21 18:07:35 +02:00
Dominik Richter
cceefa54cf add base resource 
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
 2015-06-21 17:06:04 +02:00
Dominik Richter
8026915ce5 feature: support skipping rules via resources 
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
 2015-06-21 16:32:42 +02:00
Dominik Richter
b942a1a103 bugfix: run without profile ID defined 
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
 2015-06-21 10:28:13 +02:00
Dominik Richter
1abfdae264 bugfix: use fully qualified profile IDs 
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
 2015-06-20 02:21:08 +02:00
Dominik Richter
ef4471d20b feature: allow to skip rules 
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
 2015-06-20 00:20:44 +02:00
Dominik Richter
2e1106b933 feature: add rule hierarchy with include and require rules 
include_rules 'vulcanosec/ssh'

this will include all rules defined in vulcanosec/ssh

    require_rules 'vulcanosec/linux'

this will not include any rules yet, but you may choose what you want to pull in.

both have a block attached which will allow you to choose rules (for require_rules) and redefined/change existing rules as you like. small example:

    require_rules 'vulcanosec/linux' do
      rule fs-3 do
        impact 1.0
      end
    end

Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
 2015-06-20 00:00:53 +02:00
Dominik Richter
a6748e2418 load rules from a spec file into a profile context 2015-06-19 22:23:07 +02:00
Dominik Richter
7649d1459c simplify global vs embedded rule handling 
i.e. one executes directly, the other just registers. this change makes such a distinction much easier

Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
 2015-06-19 21:52:57 +02:00
Dominik Richter
da71e1e826 move DSL helper methods out of local DSL space 
to avoid potential collissions

Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
 2015-06-19 21:43:04 +02:00
Dominik Richter
8181ee038e move rule execution and ID-fixing out 
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
 2015-06-19 21:17:56 +02:00
Dominik Richter
f64f15ee6b make syntax binding to scope programmable 
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
 2015-06-19 20:11:26 +02:00
Dominik Richter
e689afb4b8 improvement: split vulcano core library from verification 2015-06-19 16:45:36 +02:00
Dominik Richter
aebed6cb55 bugfix: only call rule blocks if they are given 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-19 16:32:11 +02:00
Dominik Richter
6f4a1fc092 move log out of bin/vulcano; it's not used there 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-19 15:06:44 +02:00
Dominik Richter
1b36802589 feature: include other rules 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-18 17:32:40 +02:00
Dominik Richter
1a05865d6e feature: print number of rules checked 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-16 23:33:27 +02:00
Dominik Richter
1247dd7bc7 api: change check -> rule 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-16 23:30:08 +02:00
Dominik Richter
e86cd978eb bugfix: create check structure with meta-info 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-12 12:32:10 +02:00
Dominik Richter
9f02a88e54 improvement: separate checking information from processing 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-10 17:53:25 +02:00
Dominik Richter
3013bdcc46 feature: add pry for development consoles 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-10 17:40:16 +02:00
Dominik Richter
c329b6743a bugfix: add resources to rules 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-10 17:37:51 +02:00
Dominik Richter
0c0be4b09e bugfix: don't evaluate nil impact 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-10 17:36:30 +02:00
Dominik Richter
b5fb4c46c0 improvement: print file which has error 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-10 17:26:29 +02:00
Dominik Richter
fb9d09af49 bugfix: gsub on empty desciption 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-10 17:23:36 +02:00
Dominik Richter
beee62fabd improvement: separate specfile sanitize vs check 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-10 17:21:03 +02:00
Dominik Richter
1833ff9aa0 bugfix: call lambda correctly 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-10 17:16:05 +02:00
Dominik Richter
5ba7fb0386 bugfix: recognize empty title as title==id 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-10 17:15:26 +02:00
Dominik Richter
4ab30252fb feature: vulcano check 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-10 17:03:12 +02:00
Dominik Richter
7a022f9c0a change json syntax to: map[string]check 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-07 22:24:53 +02:00
Dominik Richter
e9d642fc61 feature: replace vcheck 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-07 21:41:54 +02:00
Dominik Richter
44d1f88dda add version 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-07 19:49:55 +02:00
Dominik Richter
f56618f364 bugfix: cascade IDs to child describe-blocks (from :its) 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-07 19:20:16 +02:00
Dominik Richter
64d90c326f feature: add rules with IDs 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-06-07 17:09:02 +02:00