# encoding: utf-8 # copyright: 2015, Vulcano Security GmbH # author: Dominik Richter # author: Christoph Hartmann # license: All rights reserved require 'utils/simpleconfig' require 'utils/find_files' require 'resources/postgres' module Inspec::Resources class PostgresConf < Inspec.resource(1) name 'postgres_conf' desc 'Use the postgres_conf InSpec audit resource to test the contents of the configuration file for PostgreSQL, typically located at /etc/postgresql//main/postgresql.conf or /var/lib/postgres/data/postgresql.conf, depending on the platform.' example " describe postgres_conf do its('max_connections') { should eq '5' } end " include FindFiles def initialize(conf_path = nil) @conf_path = conf_path || inspec.postgres.conf_path @conf_dir = File.expand_path(File.dirname(@conf_path)) @files_contents = {} @content = nil @params = nil read_content end def content @content ||= read_content end def params(*opts) @params || read_content res = @params opts.each do |opt| res = res[opt] unless res.nil? end res end def read_content @content = '' @params = {} # skip if the main configuration file doesn't exist if !inspec.file(@conf_path).file? return skip_resource "Can't find file \"#{@conf_path}\"" end raw_conf = read_file(@conf_path) if raw_conf.empty? && inspec.file(@conf_path).size > 0 return skip_resource("Can't read file \"#{@conf_path}\"") end to_read = [@conf_path] until to_read.empty? raw_conf = read_file(to_read[0]) @content += raw_conf params = SimpleConfig.new(raw_conf).params @params.merge!(params) to_read = to_read.drop(1) # see if there is more config files to include to_read += include_files(params).find_all do |fp| not @files_contents.key? fp end end @content end def include_files(params) include_files = params['include'] || [] include_files += params['include_if_exists'] || [] dirs = params['include_dir'] || [] dirs.each do |dir| dir = File.join(@conf_dir, dir) if dir[0] != '/' include_files += find_files(dir, depth: 1, type: 'file') end include_files end def read_file(path) @files_contents[path] ||= inspec.file(path).content end def to_s 'PostgreSQL Configuration' end end end