inspec/test/kitchen/policies/default/controls/group_spec.rb

# test root group on linux
if os.linux?
  describe group('root') do
    it { should exist }
    its('gid') { should eq 0 }
  end

  describe group('noroot') do
    it { should_not exist }
    its('gid') { should eq nil }
  end
elsif os[:family] == 'freebsd'
  describe group('wheel') do
    it { should exist }
    its('gid') { should eq 0 }
  end

  describe group('root') do
    it { should_not exist }
    its('gid') { should eq nil }
  end

  describe group('noroot') do
    it { should_not exist }
    its('gid') { should eq nil }
  end
elsif os[:family] == 'aix'
  describe group('system') do
    it { should exist }
    its('gid') { should eq 0 }
  end

  describe group('bin') do
    it { should exist }
    its('gid') { should eq 2 }
  end

  describe group('noroot') do
    it { should_not exist }
    its('gid') { should eq nil }
  end
elsif os.solaris?
  describe group('root') do
    it { should exist }
    its('gid') { should eq 0 }
  end

  describe group('bin') do
    it { should exist }
    its('gid') { should eq 2 }
  end

  describe group('noroot') do
    it { should_not exist }
    its('gid') { should eq nil }
  end
elsif os[:family] == 'windows'
  describe group('Administrators') do
    it { should exist }
    its('gid') { should eq 'S-1-5-32-544' }
    its('members') { should include 'Administrator' }
  end

  describe group('Power Users') do
    it { should exist }
    its('gid') { should eq 'S-1-5-32-547' }
    its('members') { should eq [] }
  end
end