inspec/lib/resources/group_policy.rb
2015-10-26 12:34:15 +01:00

54 lines
1.2 KiB
Ruby

# encoding: utf-8
# copyright: 2015, Vulcano Security GmbH
# author: Christoph Hartmann
# author: Dominik Richter
# license: All rights reserved
require 'json'
# return JSON object
def gpo(policy_path, policy_name)
file = ::File.read(::File.join ::File.dirname(__FILE__), 'gpo.json')
gpo_hash = JSON.parse(file)
key = 'Machine--' + policy_path + '--' + policy_name
gpo_hash[key]
end
# Group Policy
class GroupPolicy < Inspec.resource(1)
name 'group_policy'
def get_registry_value(entry)
keys = entry['registry_information'][0]
cmd = "(Get-Item 'Registry::#{keys['path']}').GetValue('#{keys['key']}')"
command_result ||= inspec.command(cmd)
val = { exit_code: command_result.exit_status.to_i, data: command_result.stdout }
val
end
def convert_value(value)
val = value.strip
val = val.to_i if val.match(/^\d+$/)
val
end
# returns nil, if not existant or value
def method_missing(meth)
# map gpo to registry key
entry = gpo(@name, meth.to_s)
# get data
val = get_registry_value(entry)
# verify data
if (val[:exit_code] == 0)
return convert_value(val[:data])
else
return nil
end
end
def to_s
'Group Policy'
end
end