# encoding: utf-8 # copyright: 2015, Vulcano Security GmbH # license: All rights reserved require 'json' # return JSON object def gpo (policy_path, policy_name) file = ::File.read(::File.join ::File.dirname(__FILE__), "gpo.json") gpo_hash = JSON.parse(file) key = "Machine--" + policy_path + "--" + policy_name gpo_hash[key] end # Group Policy class GroupPolicy < Vulcano.resource(1) name 'group_policy' def getRegistryValue(entry) keys = entry['registry_information'][0] cmd = "(Get-Item 'Registry::#{keys['path']}').GetValue('#{keys['key']}')" command_result ||= @vulcano.run_command(cmd) val = { :exit_code => command_result.exit_status.to_i, :data => command_result.stdout } val end def convertValue (value) val = value.strip val = val.to_i if val.match(/^\d+$/) end # returns nil, if not existant or value def method_missing(meth) # map gpo to registry key entry = gpo(@name, meth.to_s) # get data val = getRegistryValue(entry) # verify data if (val[:exit_code] == 0) val = convertValue(val[:data]) else nil end end def to_s 'Group Policy' end end