mirror of
https://github.com/inspec/inspec
synced 2024-11-23 21:23:29 +00:00
65589f8f78
When a header includes two `_`s, they must be escaped, otherwise, the text between the two `_`s is rendered with emphasis. E.g., `<h1 id="etchostsallow">etc<em>hosts</em>allow</h1>` Escaping the `_`s fixes this and the header is rendered properly. This is a fix for: * etc_hosts_allow * etc_hosts_deny * postgres_hba_conf * postgres_ident_conf This change also adds the `h1` title to the windows_hotfix resource page. Signed-off-by: Nathen Harvey <nharvey@chef.io>
68 lines
2 KiB
Text
68 lines
2 KiB
Text
---
|
|
title: About the etc_hosts_allow Resource
|
|
---
|
|
|
|
# etc\_hosts\_allow
|
|
|
|
Use the `etc_hosts_allow` InSpec audit resource to test rules set to accept daemon and client traffic set in /etc/hosts.allow file.
|
|
|
|
<br>
|
|
|
|
## Syntax
|
|
|
|
An etc/hosts.allow rule specifies one or more daemons mapped to one or more clients,
|
|
with zero or more options to use to accept traffic when found.
|
|
|
|
Use the where clause to match a property to one or more rules in the hosts.allow file.
|
|
|
|
describe etc_hosts_allow.where { daemon == 'value' } do
|
|
its ('client_list') { should include ['values'] }
|
|
its ('options') { should include ['values'] }
|
|
end
|
|
|
|
Use the optional constructor parameter to give an alternative path to hosts.allow
|
|
|
|
describe etc_hosts_allow(hosts_path).where { daemon == 'value' } do
|
|
its ('client_list') { should include ['values'] }
|
|
its ('options') { should include ['values'] }
|
|
end
|
|
|
|
where
|
|
|
|
* `daemon` is a daemon that will be allowed to pass traffic in.
|
|
* `client_list` is a list of clients will be allowed to pass traffic in.
|
|
* `options` is a list of tasks that to be done with the rule when traffic is found.
|
|
|
|
<br>
|
|
|
|
## Supported Properties
|
|
|
|
'daemon', 'client_list', 'options'
|
|
|
|
<br>
|
|
|
|
## Property Examples and Return Types
|
|
|
|
### daemon
|
|
|
|
`daemon` returns a string containing the daemon that is allowed in the rule.
|
|
|
|
describe etc_hosts_allow.where { client_list == ['127.0.1.154', '[:fff:fAb0::]'] } do
|
|
its('daemon') { should eq ['vsftpd', 'sshd'] }
|
|
end
|
|
|
|
### client_list
|
|
|
|
`client_list` returns a 2d string array where each entry contains the clients specified for the rule.
|
|
|
|
describe etc_hosts_allow.where { daemon == 'sshd' } do
|
|
its('client_list') { should include ['192.168.0.0/16', '[abcd::0000:1234]'] }
|
|
end
|
|
|
|
### options
|
|
|
|
`options` returns a 2d string array where each entry contains any options specified for the rule.
|
|
|
|
describe etc_hosts_allow.where { daemon == 'sshd' } do
|
|
its('options') { should include ['deny', 'echo "REJECTED"'] }
|
|
end
|