Christoph Hartmann
9783751741
implement package resource
2015-09-22 02:15:41 +02:00
Christoph Hartmann
a7efec310b
implement yum resource
2015-09-22 01:10:56 +02:00
Christoph Hartmann
7e9eb2920d
add usage header for audit resource
2015-09-21 14:12:34 +02:00
Christoph Hartmann
62d0b217f9
optimize comments for audit_policy resource
2015-09-21 14:09:43 +02:00
Christoph Hartmann
e57e5f3fd6
bugfix: use new volcano backend for registry key
2015-09-21 14:09:10 +02:00
Christoph Hartmann
92ff33cbba
improvement: use separate object to hold filter state, optimize users output
2015-09-21 14:07:58 +02:00
Christoph Hartmann
d40ab9a9ad
bugfix: set default path for inetd_conf
2015-09-21 14:06:01 +02:00
Christoph Hartmann
0d7d01efbd
bugfix: set default path for limits.conf
2015-09-21 14:04:02 +02:00
Christoph Hartmann
797d24c14a
add login_def resource unit test
2015-09-21 14:01:51 +02:00
Christoph Hartmann
9358ac3035
rename env.rb to os_env.rb
2015-09-21 13:58:47 +02:00
Christoph Hartmann
672f03a0dd
improve output of ntp resource for single value arrays
2015-09-21 13:58:03 +02:00
Christoph Hartmann
7295e4c16f
improve handling on uid data view
2015-09-21 13:56:08 +02:00
Christoph Hartmann
852e5ae627
improvement: remove class variables from security policy implementation
2015-09-21 13:52:49 +02:00
Christoph Hartmann
53eb3b6990
bugfix: escape string before regex, fix regular expression to identify key
2015-09-21 13:52:33 +02:00
Christoph Hartmann
e9e24a6bd5
use new volcano backend for security policy
2015-09-21 13:51:27 +02:00
Christoph Hartmann
cdf15b9dd1
bugfix: support multiple values in ssh config like 'HostKey', improve readability by extracting the first value from array, if we have only one value
2015-09-21 13:43:09 +02:00
Christoph Hartmann
0e8651bf26
fix rubocop issues
2015-09-05 16:07:54 +02:00
Christoph Hartmann
36c9de7529
more rubocop fixes
2015-09-04 09:59:30 +02:00
Christoph Hartmann
bbbb8380ca
replace raise with fail
2015-09-03 23:24:42 +02:00
Christoph Hartmann
556bb5a0f0
remove empty lines
2015-09-03 23:20:53 +02:00
Christoph Hartmann
1773d20178
use single quotes
2015-09-03 23:18:28 +02:00
Christoph Hartmann
5c137a7ab1
remove redundant return
2015-09-03 20:45:37 +02:00
Christoph Hartmann
349d5bf9f1
harmonize method definition style
2015-09-03 20:43:58 +02:00
Christoph Hartmann
7bdcc00e94
add utf-8 header
2015-09-03 20:36:46 +02:00
Christoph Hartmann
5612752b82
use single quotes
2015-09-03 20:35:23 +02:00
Christoph Hartmann
7db6941219
feature: add bond resource implementation
2015-09-03 17:34:11 +02:00
Dominik Richter
c9fcb2913a
complete all file tests
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-09-03 16:17:52 +02:00
Dominik Richter
29a143a67f
remove file ctime
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-09-03 15:43:30 +02:00
Dominik Richter
e08787d14e
move file interface + helpers to backend plugin
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-09-02 00:50:52 +02:00
Dominik Richter
f60b7580d5
complete specinfra file backend
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-09-01 11:48:50 +02:00
Dominik Richter
a64597594e
minor bugfixes
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-09-01 11:11:34 +02:00
Dominik Richter
601abe2579
rename backend reference @vulcano -> vulcano
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-29 19:33:15 -07:00
Dominik Richter
b2e031c056
start serverspec migration
...
This project is inspired by Serverspec and all the wonderful contributions that went into it. Thank you all so much! We have used Serverspec as our audit base and have now a slightly different perspective. We hope to continue the spirit on this path. Hopefully both projects will find their way together.
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-29 17:36:05 -07:00
Dominik Richter
d292ed6ea5
migrate directory resource
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-29 17:24:34 -07:00
Dominik Richter
e5daa52064
fix ssh config path
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-29 17:18:37 -07:00
Dominik Richter
1bbe67682e
start migrating file resource
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-29 17:14:17 -07:00
Dominik Richter
50a5803427
rename is_file? -> file?
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-29 17:13:53 -07:00
Dominik Richter
84102b89de
rename contents -> content
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-29 02:10:36 -07:00
Dominik Richter
5a8bcf2b93
migrate file resource
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-29 00:44:16 -07:00
Dominik Richter
1d805aca2c
migrate group policy
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-28 16:09:35 -07:00
Dominik Richter
554accdedc
reimplement command resource
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-28 16:08:24 -07:00
Dominik Richter
e0459c4116
migrate all of audit
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-28 16:04:52 -07:00
Dominik Richter
2a8b8d3394
migrate env and apache conf
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-28 13:02:18 -07:00
Dominik Richter
dddc9daed0
migrated inetd config and etc group
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-28 12:52:59 -07:00
Dominik Richter
2103a4485b
migrate limits and login defs
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-28 12:47:37 -07:00
Dominik Richter
8004d6f129
migrate all mysql resources
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-28 12:41:48 -07:00
Dominik Richter
1a45f32f0b
migrated all postgres resources
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-28 12:37:03 -07:00
Dominik Richter
83d846ac7f
migrate ntp conf and parse_config
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-28 12:32:17 -07:00
Dominik Richter
d9d67e943a
migrate passwd and processes
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-28 12:27:35 -07:00
Dominik Richter
dc0f61a0ef
migrate registry_key + security_policy
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-28 11:52:22 -07:00
Dominik Richter
3bf8037638
move to a simpler plugin structure
...
This has been inspired in its calling structure by the wonderful work done in Vagrant. Kudos to all contributors!
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-28 10:10:03 -07:00
Dominik Richter
9e7ea1ef5d
move ssh_conf to new structure
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-27 20:02:38 -07:00
Dominik Richter
7e1f9b8a15
move resources lib
...
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2015-08-27 13:58:07 -07:00
Dominik Richter
5e8af49561
runtime bugfixes
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 23:39:43 -07:00
Dominik Richter
61f5f95147
make sure etc group values in where clause are strings
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 20:49:55 -07:00
Dominik Richter
b72ba08c06
trip whitespace
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 20:37:58 -07:00
Dominik Richter
a48d032cec
double-check if data is read from conf apache/postgres/mysql
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 20:35:18 -07:00
Dominik Richter
df8be769af
skip apache conf if file doesn't exist
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 20:28:32 -07:00
Dominik Richter
9621b1c9e9
skip postgres+mysql conf if file doesn't exist
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 20:27:34 -07:00
Dominik Richter
93065b9dda
use FindFiles for postgres conf
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 20:17:07 -07:00
Dominik Richter
c733a577da
improvement: unify FindFiles
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 20:11:01 -07:00
Dominik Richter
e9ee17c176
bugfix: find included files on remote host
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 19:50:49 -07:00
Dominik Richter
178ca83a4b
specify inetd_conf path
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 19:34:24 -07:00
Dominik Richter
07edef95ad
flatten users of groups
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 18:56:14 -07:00
Dominik Richter
3682a8279d
make sure to get conditions as symbols
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 18:49:05 -07:00
Dominik Richter
e0b0b52af3
feature: etc_group with where-function overhaul
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 18:42:05 -07:00
Dominik Richter
53112f4156
move resource methods to respective library files
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 17:40:08 -07:00
Dominik Richter
42c3f95b41
move local parseconfig resources to library file
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 17:25:27 -07:00
Dominik Richter
6faf07aa7d
rename parse_config back to parse_config_file
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-02 17:24:15 -07:00
Dominik Richter
1344fba629
configurable limits_conf path
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-01 09:52:55 +02:00
Dominik Richter
70a6130335
move ssh_config + sshd_config with paths to the resource file
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-01 09:43:38 +02:00
Dominik Richter
cc28749adf
configurable paths for postgres + mysql confs
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-01 09:38:52 +02:00
Dominik Richter
700e2bab26
feature: add mysql resource
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-01 09:31:57 +02:00
Dominik Richter
f2fed3fa6d
api: change default of multiple_values true -> false in SimpleConfig
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-01 09:23:02 +02:00
Dominik Richter
9bf968838c
rename conf_ssh -> ssh_config
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-01 09:22:25 +02:00
Dominik Richter
0c5a28431d
feature: postgres information based on OS
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-08-01 09:21:32 +02:00
Dominik Richter
f51e89d3b1
shorten mysql and postgres session resources
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-07-30 18:28:57 +02:00
Christoph Hartmann
378a98797e
rename config_file resource
2015-07-27 23:26:10 +02:00
Christoph Hartmann
44f5ecef77
add apache config parser
2015-07-27 23:26:10 +02:00
Christoph Hartmann
bd6a294ac5
bugfix: add toString method for resources
2015-07-26 22:45:44 +02:00
Christoph Hartmann
345d7fb5cb
improvement: parse config can be configured
2015-07-26 22:45:18 +02:00
Christoph Hartmann
d926a67596
feature: resource for ntp configuration
2015-07-26 22:44:33 +02:00
Christoph Hartmann
24e9210160
feature: resources for audit daemon
2015-07-26 22:44:01 +02:00
Christoph Hartmann
34b8ab5f2a
refactor audit policy
2015-07-26 22:43:24 +02:00
Christoph Hartmann
32c4575642
add inetd resource
2015-07-26 12:53:29 +02:00
Christoph Hartmann
17476fd634
add limits.conf resource
2015-07-26 12:30:46 +02:00
Christoph Hartmann
8e16decccd
refactor types
2015-07-26 12:30:12 +02:00
Christoph Hartmann
5d4e44872c
remove puts
2015-07-16 01:51:26 +02:00
Christoph Hartmann
fd4bb5f467
bugfix: fix id
2015-07-16 01:40:37 +02:00
Christoph Hartmann
0268d44052
add types
2015-07-16 01:09:54 +02:00
Christoph Hartmann
db8ff02313
add logindef and parse_config type
2015-07-15 16:33:39 +02:00
Christoph Hartmann
018601480d
add etc_group implementation
2015-07-15 15:16:10 +02:00
Christoph Hartmann
dc94f2c2b5
add description for passwd file format
2015-07-15 15:15:53 +02:00
Christoph Hartmann
37f0ea7d6a
update copyright header
2015-07-15 15:15:18 +02:00
Christoph Hartmann
6ab07121de
add line feed
2015-07-15 00:50:42 +02:00
Christoph Hartmann
dbbad50c09
add passwd extraction of passwords
2015-07-15 00:50:19 +02:00
Christoph Hartmann
8c17ab29a5
add passwd support
2015-07-15 00:47:17 +02:00
Christoph Hartmann
4ff1687f6e
add env support
2015-07-15 00:47:04 +02:00
Christoph Hartmann
f165e51e1f
return nil, if we haven't received a value
2015-06-27 21:29:57 +02:00
Dominik Richter
3440f6f69e
bugfix scope
...
Signed-off-by: Dominik Richter <dominik@vulcanosec.com>
2015-06-22 18:21:09 +02:00