mirror of
https://github.com/inspec/inspec
synced 2024-12-13 06:42:40 +00:00
07dc5e3192
3 files left to go, and they're behaving oddly so I'm leaving them out in this pass. Looks like 21 deprecations left. Signed-off-by: Ryan Davis <zenspider@chef.io>
158 lines
4.5 KiB
Ruby
158 lines
4.5 KiB
Ruby
require "helper"
|
|
require "inspec/resource"
|
|
require "inspec/resources/shadow"
|
|
|
|
describe "Inspec::Resources::Shadow" do
|
|
let(:shadow) { load_resource("shadow") }
|
|
|
|
it "content should be mapped correctly" do
|
|
_(shadow.content).must_equal "root:x:1:2:3\nwww-data:!!:10:20:30:40:50:60"
|
|
end
|
|
|
|
it "retrieve users via field" do
|
|
_(shadow.users).must_equal %w{root www-data}
|
|
_(shadow.count).must_equal 2
|
|
end
|
|
|
|
it "retrieve passwords via field" do
|
|
_(shadow.passwords).must_equal %w{x !!}
|
|
end
|
|
|
|
it "retrieve last password change via field" do
|
|
_(shadow.last_changes).must_equal %w{1 10}
|
|
end
|
|
|
|
it "retrieve min password days via field" do
|
|
_(shadow.min_days).must_equal %w{2 20}
|
|
end
|
|
|
|
it "retrieve max password days via field" do
|
|
_(shadow.max_days).must_equal %w{3 30}
|
|
end
|
|
|
|
it "retrieve warning days for password expiry via field" do
|
|
_(shadow.warn_days).must_equal [nil, "40"]
|
|
end
|
|
|
|
it "retrieve days before account is inactive via field" do
|
|
_(shadow.inactive_days).must_equal [nil, "50"]
|
|
end
|
|
|
|
it "retrieve dates when account will expire via field" do
|
|
_(shadow.expiry_dates).must_equal [nil, "60"]
|
|
end
|
|
|
|
it "access all lines of the file" do
|
|
expect_deprecation(:properties_shadow) do
|
|
_(shadow.lines[0]).must_equal "root:x:1:2:3::::"
|
|
end
|
|
end
|
|
|
|
it "access all params of the file" do
|
|
_(shadow.entries[0].to_h).must_equal({
|
|
user: "root", password: "x", last_change: "1",
|
|
min_days: "2", max_days: "3", warn_days: nil,
|
|
inactive_days: nil, expiry_date: nil, reserved: nil
|
|
})
|
|
end
|
|
|
|
it "returns deprecation notice on user property" do
|
|
expect_deprecation(:properties_shadow) do
|
|
_(shadow.user).must_equal %w{root www-data}
|
|
end
|
|
end
|
|
|
|
it "returns deprecatation notice on password property" do
|
|
expect_deprecation(:properties_shadow) do
|
|
_(shadow.password).must_equal %w{x !!}
|
|
end
|
|
end
|
|
|
|
it "returns deprecation notice on last_change property" do
|
|
expect_deprecation(:properties_shadow) do
|
|
_(shadow.last_change).must_equal %w{1 10}
|
|
end
|
|
end
|
|
|
|
it "returns deprecation notice on expiry_date property" do
|
|
expect_deprecation(:properties_shadow) do
|
|
_(shadow.expiry_date).must_equal [nil, "60"]
|
|
end
|
|
end
|
|
|
|
describe "multiple filters" do
|
|
it "filters with min_days and max_days" do
|
|
_(shadow.filter(min_days: 20, max_days: 30).users).must_equal ["www-data"]
|
|
_(shadow.filter(last_change: 1, min_days: 2).users).must_equal ["root"]
|
|
end
|
|
end
|
|
|
|
describe "when method chained" do
|
|
let(:unreadable_shadow) { load_resource("shadow", "/fakepath/fakefile") }
|
|
|
|
it "can read /etc/shadow and #filter matches user with no password and inactive_days" do
|
|
users = shadow.filter(password: /[^x]/).entries.map { |x| x["user"] }
|
|
|
|
users.each do |expected_user|
|
|
expect_deprecation(:properties_shadow) do
|
|
_(shadow.user(expected_user).users).must_equal(["www-data"])
|
|
end
|
|
expect_deprecation(:properties_shadow) do
|
|
_(shadow.user(expected_user).inactive_days).must_equal(["50"])
|
|
end
|
|
end
|
|
end
|
|
|
|
it "cant read /etc/unreadable_shadow and #filter matches nothing" do
|
|
users = unreadable_shadow.filter(password: /[^x]/).entries.map { |x| x["user"] }
|
|
users.each do |user|
|
|
_(shadow.users(user).user).must_equal([])
|
|
_(shadow.users(user).inactive_days).must_equal([])
|
|
end
|
|
end
|
|
|
|
it "returns the unreadable_shadow path" do
|
|
_(unreadable_shadow.to_s).must_equal "/fakepath/fakefile"
|
|
end
|
|
end
|
|
|
|
describe "filter via name =~ /^www/" do
|
|
let(:child) { shadow.users(/^www/) }
|
|
|
|
it "filters by user via name (regex)" do
|
|
_(child.users).must_equal ["www-data"]
|
|
_(child.count).must_equal 1
|
|
end
|
|
|
|
it "prints a nice to_s string" do
|
|
_(child.to_s).must_equal "/etc/shadow with user == /^www/"
|
|
end
|
|
end
|
|
|
|
describe "filter via name = root" do
|
|
let(:child) { shadow.users("root") }
|
|
|
|
it "filters by user name" do
|
|
_(child.users).must_equal %w{root}
|
|
_(child.count).must_equal 1
|
|
end
|
|
end
|
|
|
|
describe "filter via min_days" do
|
|
let(:child) { shadow.min_days("20") }
|
|
|
|
it "filters by property" do
|
|
_(child.users).must_equal %w{www-data}
|
|
_(child.count).must_equal 1
|
|
end
|
|
end
|
|
|
|
describe "it raises errors" do
|
|
it "fails and raises error on unsupported os" do
|
|
resource = MockLoader.new(:windows).load_resource("shadow")
|
|
_(resource.resource_failed?).must_equal true
|
|
_(resource.resource_exception_message)
|
|
.must_equal "Resource `shadow` is not supported on platform windows/6.2.9200."
|
|
end
|
|
end
|
|
end
|