mirror of
https://github.com/inspec/inspec
synced 2024-11-27 07:00:39 +00:00
40 lines
1.7 KiB
Ruby
40 lines
1.7 KiB
Ruby
require "helper"
|
|
require "inspec/resource"
|
|
require "inspec/resources/mysql_session"
|
|
require "inspec/resources/command"
|
|
|
|
describe "Inspec::Resources::MysqlSession" do
|
|
it "verify mysql_session escaped login details with single quotes correctly" do
|
|
resource = load_resource("mysql_session",
|
|
"root",
|
|
%q{'%"'"&^*&()'*%})
|
|
|
|
_(resource.send(:create_mysql_cmd, "SELECT 1 FROM DUAL;"))
|
|
.must_equal(%q{mysql -uroot -p\'\%\"\'\"\&\^\*\&\(\)\'\*\% -h localhost -s -e "SELECT 1 FROM DUAL;"})
|
|
end
|
|
it "verify mysql_session omits optional username and password" do
|
|
resource = load_resource("mysql_session")
|
|
|
|
_(resource.send(:create_mysql_cmd, "SELECT 1 FROM DUAL;"))
|
|
.must_equal('mysql -h localhost -s -e "SELECT 1 FROM DUAL;"')
|
|
end
|
|
it "verify mysql_session redacts output" do
|
|
cmd = %q{mysql -uroot -p\'\%\"\'\"\&\^\*\&\(\)\'\*\% -h localhost -s -e "SELECT 1 FROM DUAL;"}
|
|
options = { redact_regex: /(mysql -u\w+ -p).+(\s-(h|S).*)/ }
|
|
resource = load_resource("command", cmd, options)
|
|
|
|
expected_to_s = %q{Command: `mysql -uroot -pREDACTED -h localhost -s -e "SELECT 1 FROM DUAL;"`}
|
|
_(resource.to_s).must_equal(expected_to_s)
|
|
end
|
|
it "fails when no user, password" do
|
|
resource = load_resource("mysql_session", nil, nil, "localhost", 3306)
|
|
_(resource.resource_failed?).must_equal true
|
|
_(resource.resource_exception_message).must_equal "Can't run MySQL SQL checks without authentication."
|
|
end
|
|
it "fails when no connection established" do
|
|
resource = load_resource("mysql_session", "root", "root", "localhost", 3306)
|
|
_(resource.resource_failed?).must_equal true
|
|
_(resource.resource_exception_message).must_include "MySQL query with errors"
|
|
end
|
|
|
|
end
|