2
0
Fork 0
mirror of https://github.com/inspec/inspec synced 2024-12-22 19:13:24 +00:00
inspec/test/integration/default/user_spec.rb
2016-09-09 09:31:38 +02:00

144 lines
3.4 KiB
Ruby

# encoding: utf-8
if ['centos', 'redhat', 'fedora', 'suse', 'debian', 'ubuntu'].include?(os[:family])
userinfo = {
username: 'root',
groupname: 'root',
uid: 0,
gid: 0,
groups: "root",
home: '/root',
shell: '/bin/bash',
}
# different groupset for centos 5
userinfo[:groups] = ["root", "bin", "daemon", "sys", "adm", "disk", "wheel"] \
if os[:release].to_i == 5
elsif ['freebsd'].include?(os[:family])
userinfo = {
username: 'root',
groupname: 'wheel',
uid: 0,
gid: 0,
groups: "wheel", # at least this group should be there
home: '/root',
shell: '/bin/csh',
}
elsif os.windows?
hostname = powershell('$env:computername').stdout.chomp
userinfo = {
username: hostname + '\Administrator',
groupname: nil,
uid: nil,
gid: nil,
groups: nil,
home: nil,
shell: nil,
}
# store uid of user
userinfo[:uid] = user(userinfo[:username]).uid
elsif os[:family] == 'aix'
userinfo = {
username: 'bin',
groupname: 'bin',
uid: 2,
gid: 2,
groups: "adm", # at least this group should be there
home: '/bin',
shell: nil,
#mindays: 0,
#maxdays: 0,
warndays: 0,
}
elsif os.solaris?
if os[:release].to_i > 10
userinfo = {
username: 'root',
groupname: 'root',
uid: 0,
gid: 0,
groups: "sys", # at least this group should be there
home: '/root',
shell: '/usr/bin/bash',
}
else
userinfo = {
username: 'root',
groupname: 'root',
uid: 0,
gid: 0,
groups: "sys", # at least this group should be there
home: '/',
shell: '/sbin/sh',
}
end
elsif os.darwin?
userinfo = {
username: 'root',
groupname: 'wheel',
uid: 0,
gid: 0,
groups: "wheel", # at least this group should be there
home: '/var/root',
shell: '/bin/sh',
}
else
userinfo = {}
end
if os.windows?
# test single `user` resource
describe user(userinfo[:username]) do
it { should exist }
# should return the SID of the user
its('uid') { should_not eq nil}
end
# also support simple username for local users without domain
describe user('Administrator') do
it { should exist }
# should return the SID of the user
its('uid') { should_not eq nil}
end
else
# test single `user` resource
describe user(userinfo[:username]) do
it { should exist }
userinfo.each do |k, v|
# check that the user is part of the groups
if k.to_s == 'groups'
its(k) { should include v } unless ENV['DOCKER']
# default eq comparison
else
its(k) { should eq v }
end
end
end
describe users.where(username: userinfo[:username]).groups.entries[0] do
it { should include userinfo[:groups] }
end
end
# test `users` resource
describe users.where(username: userinfo[:username]) do
userinfo.each do |k, v|
name = k.to_s
if name == 'groups'
# its(name) { should include v }
else
name += 's' unless %w{ maxdays mindays warndays }.include? name
expected_value = [v]
its(name) { should eq expected_value}
end
end
end
# catch case where user is not existant
describe user('not_available') do
it { should_not exist }
its ('uid') { should eq nil}
its ('username') { should eq nil}
its ('gid') { should eq nil}
its ('home') { should eq nil}
its ('shell') { should eq nil}
end