mirror of
https://github.com/inspec/inspec
synced 2024-11-14 00:47:10 +00:00
7a6119e7a6
* Add missing tests for groups resource, document members propery, and assorted fixes. Update existing documentation for group resource. Add documentation for groups resource. Update group resource tests to test members property. Change groups resource members property to have simple style. (this ensures members is a single array) remove deprecated have_gid propery. change `if !` to `unless` Remove early return from members method. This prevented members from working correctly on any OS other than Windows. Add missing tests for the groups resource. remove tests for has_gid Signed-off-by: Miah Johnson <miah@chia-pet.org> * Fix comments Signed-off-by: Jared Quick <jquick@chef.io>
85 lines
1.8 KiB
Text
85 lines
1.8 KiB
Text
---
|
|
title: About the groups Resource
|
|
platform: os
|
|
---
|
|
|
|
# groups
|
|
|
|
Use the `groups` InSpec audit resource to test multiple groups on the system.
|
|
|
|
<br>
|
|
|
|
## Availability
|
|
|
|
### Installation
|
|
|
|
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
|
|
### Version
|
|
|
|
This resource first became available in v1.0.0 of InSpec.
|
|
|
|
## Syntax
|
|
|
|
A `groups` resource block uses `where` to filter entries from the systems groups. If `where` is omitted, all entries are selected.
|
|
|
|
describe groups do
|
|
its('names') { should eq ['wheel', 'daemon', 'sys', 'adm'] }
|
|
its('names') { should include 'wheel' }
|
|
end
|
|
|
|
describe groups.where { members =~ /root/ } do
|
|
its('names') { should eq ['wheel', 'daemon', 'sys', 'adm'] }
|
|
end
|
|
|
|
<br>
|
|
|
|
## Examples
|
|
|
|
The following examples show how to use this InSpec audit resource.
|
|
|
|
### Test the group identifier for the wheel group
|
|
|
|
describe groups.where { name == 'wheel' } do
|
|
it { should exist }
|
|
its('members') { should include 'root' }
|
|
end
|
|
|
|
<br>
|
|
|
|
## Properties
|
|
|
|
### gids
|
|
|
|
The `gids` property tests the named group identifier:
|
|
|
|
its('gids') { should eq 1234 }
|
|
|
|
### names
|
|
|
|
The `names` property tests the name field on a Windows group:
|
|
|
|
its('names') { should include 'Power Users' }
|
|
|
|
### domains
|
|
|
|
The `domains` property tests the domain on a Windows group:
|
|
|
|
its('domains') { should include 'WIN-CIV7VMLVHLD' }
|
|
|
|
### members
|
|
|
|
The `members` property tests the members that belong to a group:
|
|
|
|
its('members') { should include 'root' }
|
|
its('members') { should include 'Administrator' }
|
|
|
|
## Matchers
|
|
|
|
For a full list of available matchers, please visit our [matchers page](https://www.inspec.io/docs/reference/matchers/).
|
|
|
|
### exist
|
|
|
|
The `exist` matcher tests if the named user exists:
|
|
|
|
it { should exist }
|