abide_dev_utils 0.17.2 → 0.18.0

data/lib/abide_dev_utils/{cem → sce}/benchmark.rb

@@ -7,7 +7,7 @@ require_relative '../ppt'
 require_relative 'mapping/mapper'
 
 module AbideDevUtils
-  module CEM
+  module Sce
     # Represents a resource data resource statement
     class Resource
       attr_reader :title, :type
@@ -42,20 +42,20 @@ module AbideDevUtils
         @controls || load_controls
       end
 
-      def cem_options?
-        !cem_options.empty?
+      def sce_options?
+        !sce_options.empty?
       end
 
-      def cem_options
-        @cem_options ||= resource_properties('cem_options')
+      def sce_options
+        @sce_options ||= resource_properties('sce_options')
       end
 
-      def cem_protected?
-        !cem_protected.empty?
+      def sce_protected?
+        !sce_protected.empty?
       end
 
-      def cem_protected
-        @cem_protected ||= resource_properties('cem_protected')
+      def sce_protected
+        @sce_protected ||= resource_properties('sce_protected')
       end
 
       def dependent_controls
@@ -161,11 +161,11 @@ module AbideDevUtils
       end
 
       def params?
-        !(params.nil? || params.empty? || params == 'no_params') || (resource.cem_options? || resource.cem_protected?)
+        !(params.nil? || params.empty? || params == 'no_params') || (resource.sce_options? || resource.sce_protected?)
       end
 
       def resource_properties?
-        resource.cem_options? || resource.cem_protected?
+        resource.sce_options? || resource.sce_protected?
       end
 
       def param_hashes
@@ -211,19 +211,19 @@ module AbideDevUtils
       end
 
       def valid_maps?
-        valid = AbideDevUtils::CEM::Mapping::FRAMEWORK_TYPES[framework].each_with_object([]) do |mtype, arr|
+        valid = AbideDevUtils::Sce::Mapping::FRAMEWORK_TYPES[framework].each_with_object([]) do |mtype, arr|
           arr << if @mapper.map_type(id) == mtype
                    id
                  else
                    @mapper.get(id).find { |x| @mapper.map_type(x) == mtype }
                  end
         end
-        valid.compact.length == AbideDevUtils::CEM::Mapping::FRAMEWORK_TYPES[framework].length
+        valid.compact.length == AbideDevUtils::Sce::Mapping::FRAMEWORK_TYPES[framework].length
       end
 
       def method_missing(meth, *args, &block)
         meth_s = meth.to_s
-        if AbideDevUtils::CEM::Mapping::ALL_TYPES.include?(meth_s)
+        if AbideDevUtils::Sce::Mapping::ALL_TYPES.include?(meth_s)
           @mapper.get(id).find { |x| @mapper.map_type(x) == meth_s }
         else
           super
@@ -231,7 +231,7 @@ module AbideDevUtils
       end
 
       def respond_to_missing?(meth, include_private = false)
-        AbideDevUtils::CEM::Mapping::ALL_TYPES.include?(meth.to_s) || super
+        AbideDevUtils::Sce::Mapping::ALL_TYPES.include?(meth.to_s) || super
       end
 
       def to_h
@@ -242,7 +242,7 @@ module AbideDevUtils
           levels: levels,
           profiles: profiles,
           params: param_hashes,
-          resource: resource.to_stubbed_h,
+          resource: resource.to_stubbed_h
         }
       end
 
@@ -260,7 +260,7 @@ module AbideDevUtils
 
       def validate_id_with_framework(id, framework, mapper)
         mtype = mapper.map_type(id)
-        return if AbideDevUtils::CEM::Mapping::FRAMEWORK_TYPES[framework].include?(mtype)
+        return if AbideDevUtils::Sce::Mapping::FRAMEWORK_TYPES[framework].include?(mtype)
 
         raise AbideDevUtils::Errors::ControlIdFrameworkMismatchError, [id, mtype, framework]
       end
@@ -312,25 +312,35 @@ module AbideDevUtils
 
     # Repesents a benchmark based on resource and mapping data
     class Benchmark
-      attr_reader :osname, :major_version, :os_facts, :osfamily, :hiera_conf, :module_name, :framework
+      attr_reader :osname, :major_version, :os_facts, :osfamily, :hiera_conf, :module_name, :framework, :mapper,
+                  :resource_data, :resources, :controls
+
+      alias rules controls
 
       def initialize(osname, major_version, hiera_conf, module_name, framework: 'cis')
         @osname = osname
         @major_version = major_version
         @os_facts = AbideDevUtils::Ppt::FacterUtils::FactSets.new.find_by_fact_value_tuples(['os.name', @osname],
-                                                                                            ['os.release.major', @major_version])
+                                                                                            ['os.release.major',
+                                                                                             @major_version])
         @osfamily = @os_facts['os']['family']
         @hiera_conf = hiera_conf
         @module_name = module_name
         @framework = framework
         @map_cache = {}
         @rules_in_map = {}
+        @mapper = AbideDevUtils::Sce::Mapping::Mapper.new(@module_name, @framework, load_mapping_data)
+        @resource_data = load_resource_data
+        @resources = @resource_data["#{module_name}::resources"].each_with_object([]) do |(rtitle, rdata), arr|
+          arr << Resource.new(rtitle, rdata, framework, mapper)
+        end
+        @controls = resources.map(&:controls).flatten.sort
       end
 
       # Creates Benchmark objects from a Puppet module
       # @param pupmod [AbideDevUtils::Ppt::PuppetModule] A PuppetModule instance
       # @param skip_errors [Boolean] True skips errors and loads non-erroring benchmarks, false raises the error.
-      # @return [Array<AbideDevUtils::CEM::Benchmark>] Array of Benchmark instances
+      # @return [Array<AbideDevUtils::Sce::Benchmark>] Array of Benchmark instances
       def self.benchmarks_from_puppet_module(pupmod, ignore_all_errors: false, ignore_framework_mismatch: true)
         frameworks = pupmod.hiera_conf.local_hiera_files(hierarchy_name: 'Mapping Data').each_with_object([]) do |hf, ary|
           parts = hf.path.split(pupmod.hiera_conf.default_datadir)[-1].split('/')
@@ -372,28 +382,10 @@ module AbideDevUtils
         end
       end
 
-      def resources
-        @resources ||= resource_data["#{module_name}::resources"].each_with_object([]) do |(rtitle, rdata), arr|
-          arr << Resource.new(rtitle, rdata, framework, mapper)
-        end
-      end
-
-      def controls
-        @controls ||= resources.map(&:controls).flatten.sort
-      end
-
-      def mapper
-        @mapper ||= AbideDevUtils::CEM::Mapping::Mapper.new(module_name, framework, load_mapping_data)
-      end
-
       def map_data
         mapper.map_data
       end
 
-      def resource_data
-        @resource_data ||= load_resource_data
-      end
-
       def title
         mapper.title
       end
@@ -438,23 +430,31 @@ module AbideDevUtils
         mapper.map_type(control_id)
       end
 
+      def to_s
+        title
+      end
+
+      def inspect
+        "#<#{self.class.name}:#{object_id} title: #{title}, version: #{version}, module_name: #{module_name}, framework: #{framework}>"
+      end
+
       private
 
       def load_mapping_data
         files = case module_name
                 when /_windows$/
-                  cem_windows_mapping_files
+                  sce_windows_mapping_files
                 when /_linux$/
-                  cem_linux_mapping_files
+                  sce_linux_mapping_files
                 else
-                  raise "Module name '#{module_name}' is not a CEM module"
+                  raise "Module name '#{module_name}' is not a SCE module"
                 end
         validate_mapping_files_framework(files).each_with_object({}) do |f, h|
           h[File.basename(f.path, '.yaml')] = YAML.load_file(f.path)
         end
       end
 
-      def cem_linux_mapping_files
+      def sce_linux_mapping_files
         facts = [['os.name', osname], ['os.release.major', major_version]]
         mapping_files = hiera_conf.local_hiera_files_with_facts(*facts, hierarchy_name: 'Mapping Data')
         raise AbideDevUtils::Errors::MappingFilesNotFoundError, facts if mapping_files.nil? || mapping_files.empty?
@@ -462,7 +462,7 @@ module AbideDevUtils
         mapping_files
       end
 
-      def cem_windows_mapping_files
+      def sce_windows_mapping_files
         facts = ['os.release.major', major_version]
         mapping_files = hiera_conf.local_hiera_files_with_fact(facts[0], facts[1], hierarchy_name: 'Mapping Data')
         raise AbideDevUtils::Errors::MappingFilesNotFoundError, facts if mapping_files.nil? || mapping_files.empty?

data/lib/abide_dev_utils/{cem → sce}/generate/coverage_report.rb

@@ -6,18 +6,18 @@ require 'pathname'
 require 'yaml'
 require 'abide_dev_utils/ppt'
 require 'abide_dev_utils/validate'
-require 'abide_dev_utils/cem/benchmark'
+require 'abide_dev_utils/sce/benchmark'
 
 module AbideDevUtils
-  module CEM
+  module Sce
     module Generate
-      # Methods and objects used to construct a report of what CEM enforces versus what
+      # Methods and objects used to construct a report of what SCE enforces versus what
       # the various compliance frameworks expect to be enforced.
       module CoverageReport
         def self.generate(format_func: :to_h, opts: {})
           opts = ReportOptions.new(opts)
           pupmod = AbideDevUtils::Ppt::PuppetModule.new
-          benchmarks = AbideDevUtils::CEM::Benchmark.benchmarks_from_puppet_module(pupmod,
+          benchmarks = AbideDevUtils::Sce::Benchmark.benchmarks_from_puppet_module(pupmod,
                                                                                    ignore_all_errors: opts.ignore_all_errors)
           benchmarks.map do |b|
             BenchmarkReport.new(b, opts).run.send(format_func)
@@ -31,7 +31,7 @@ module AbideDevUtils
             level: nil,
             format_func: :to_h,
             ignore_all_errors: false,
-            xccdf_dir: nil,
+            xccdf_dir: nil
           }.freeze
 
           attr_reader(*DEFAULTS.keys)
@@ -52,7 +52,7 @@ module AbideDevUtils
           KEY_FACT_MAP = {
             os_family: 'os.family',
             os_name: 'os.name',
-            os_release_major: 'os.release.major',
+            os_release_major: 'os.release.major'
           }.freeze
 
           attr_reader(*KEY_FACT_MAP.keys)
@@ -89,11 +89,14 @@ module AbideDevUtils
           def find_mapping_data
             fact_array = fact_array_for(:os_name, :os_release_major)
             begin
-              data_array = @pupmod.hiera_conf.local_hiera_files_with_facts(*fact_array, hierarchy_name: 'Mapping Data').map do |f|
+              data_array = @pupmod.hiera_conf.local_hiera_files_with_facts(*fact_array,
+                                                                           hierarchy_name: 'Mapping Data').map do |f|
                 YAML.load_file(f.path)
               end
             rescue NoMethodError
-              data_array = @pupmod.hiera_conf.local_hiera_files(hierarchy_name: 'Mapping Data').map { |f| YAML.load_file(f.path) }
+              data_array = @pupmod.hiera_conf.local_hiera_files(hierarchy_name: 'Mapping Data').map do |f|
+                YAML.load_file(f.path)
+              end
             end
             filter_mapping_data_array_by_benchmark!(data_array)
             filter_mapping_data_array_by_profile!(data_array)
@@ -268,7 +271,7 @@ module AbideDevUtils
               title: title,
               timestamp: timestamp,
               benchmark: benchmark_hash,
-              coverage: coverage_hash,
+              coverage: coverage_hash
             }
           end
 
@@ -284,7 +287,7 @@ module AbideDevUtils
             {
               title: @benchmark.title,
               version: @benchmark.version,
-              framework: @benchmark.framework,
+              framework: @benchmark.framework
             }
           end
 
@@ -297,7 +300,7 @@ module AbideDevUtils
               covered: covered,
               percentage: percentage,
               controls_in_resource_data: controls_in_resource_data,
-              rules_in_map: rules_in_map,
+              rules_in_map: rules_in_map
             }
           end
         end
@@ -334,7 +337,7 @@ module AbideDevUtils
           private
 
           def find_controls_in_resource_data
-            controls = @benchmark.resource_data["#{@benchmark.module_name}::resources"].each_with_object([]) do |(rname, rval), arr|
+            controls = @benchmark.resource_data["#{@benchmark.module_name}::resources"].each_with_object([]) do |(_rname, rval), arr|
               arr << case rval['controls'].class.to_s
                      when 'Hash'
                        rval['controls'].keys

data/lib/abide_dev_utils/{cem → sce}/generate/reference.rb

@@ -9,10 +9,10 @@ require 'yaml'
 require 'abide_dev_utils/markdown'
 require 'abide_dev_utils/output'
 require 'abide_dev_utils/ppt'
-require 'abide_dev_utils/cem/benchmark'
+require 'abide_dev_utils/sce/benchmark'
 
 module AbideDevUtils
-  module CEM
+  module Sce
     module Generate
       # Holds objects and methods for generating a reference doc
       module Reference
@@ -22,14 +22,14 @@ module AbideDevUtils
         def self.generate(data = {})
           pupmod = AbideDevUtils::Ppt::PuppetModule.new
           doc_title = case pupmod.name
-                      when 'puppetlabs-cem_linux'
-                        'CEM Linux Reference'
-                      when 'puppetlabs-cem_windows'
-                        'CEM Windows Reference'
+                      when 'puppetlabs-sce_linux'
+                        'SCE for Linux Reference'
+                      when 'puppetlabs-sce_windows'
+                        'SCE for Windows Reference'
                       else
                         'Reference'
                       end
-          benchmarks = AbideDevUtils::CEM::Benchmark.benchmarks_from_puppet_module(pupmod)
+          benchmarks = AbideDevUtils::Sce::Benchmark.benchmarks_from_puppet_module(pupmod)
           case data.fetch(:format, 'markdown')
           when 'markdown'
             file = data[:out_file] || 'REFERENCE.md'
@@ -44,7 +44,7 @@ module AbideDevUtils
         end
 
         def self.config_example(control, params_array)
-          out_str = ['cem_windows::config:', '  control_configs:', "    \"#{control}\":"]
+          out_str = ['sce_windows::config:', '  control_configs:', "    \"#{control}\":"]
           indent = '      '
           params_array.each do |param_hash|
             val = case param_hash[:type]
@@ -61,7 +61,7 @@ module AbideDevUtils
 
         # Generates a markdown reference doc
         class MarkdownGenerator
-          SPECIAL_CONTROL_IDS = %w[dependent cem_options cem_protected].freeze
+          SPECIAL_CONTROL_IDS = %w[dependent sce_options sce_protected].freeze
 
           def initialize(benchmarks, module_name, file: 'REFERENCE.md', opts: {})
             @benchmarks = benchmarks
@@ -194,7 +194,7 @@ module AbideDevUtils
               providers: providers,
               puppet_functions: puppet_functions,
               puppet_tasks: puppet_tasks,
-              puppet_plans: puppet_plans,
+              puppet_plans: puppet_plans
             }
           end
 
@@ -312,7 +312,7 @@ module AbideDevUtils
           end
 
           def control_has_valid_params?
-            return true if @control.params? || @control.resource.cem_options? || @control.resource.cem_protected?
+            return true if @control.params? || @control.resource.sce_options? || @control.resource.sce_protected?
             return true if @control.resource.manifest? && @control.resource.manifest.declaration.parameters?
 
             false
@@ -326,7 +326,8 @@ module AbideDevUtils
 
           def param_type_expr(ctrl_param, rsrc_param)
             @control_data[ctrl_param[:name]] = {} unless @control_data.key?(ctrl_param[:name])
-            @control_data[ctrl_param[:name]][:type_expr] = rsrc_param&.type_expr? ? rsrc_param&.type_expr : ctrl_param[:type]
+            @control_data[ctrl_param[:name]][:type_expr] =
+              rsrc_param&.type_expr? ? rsrc_param&.type_expr : ctrl_param[:type]
             return unless @control_data[ctrl_param[:name]][:type_expr]
 
             " - [ #{@md.code(@control_data[ctrl_param[:name]][:type_expr])} ]"
@@ -365,7 +366,7 @@ module AbideDevUtils
             return unless control_has_valid_params?
 
             @md.add_ul('Parameters:')
-            [@control.param_hashes, @control.resource.cem_options, @control.resource.cem_protected].each do |collection|
+            [@control.param_hashes, @control.resource.sce_options, @control.resource.sce_protected].each do |collection|
               collection.each do |hsh|
                 rparam = resource_param(hsh)
                 str_array = [@md.code(hsh[:name]), param_type_expr(hsh, rparam), param_default_value(hsh, rparam)]
@@ -473,7 +474,8 @@ module AbideDevUtils
             @md.add_ul('Hiera Configuration Example:')
             @md.add_code_block(out_str.join("\n"), language: 'yaml')
           rescue StandardError => e
-            require 'pry'; binding.pry
+            require 'pry'
+            binding.pry
             err_msg = [
               "Failed to generate config example for control #{@control.id}",
               "Error: #{e.message}",

data/lib/abide_dev_utils/sce/generate.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+require 'abide_dev_utils/sce/generate/reference'
+require 'abide_dev_utils/sce/generate/coverage_report'
+
+module AbideDevUtils
+  module Sce
+    # Namespace for objects and methods used in `abide sce generate` subcommands
+    module Generate; end
+  end
+end

data/lib/abide_dev_utils/{cem → sce}/hiera_data/mapping_data/map_data.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
 module AbideDevUtils
-  module CEM
+  module Sce
     module HieraData
       module MappingData
         # Represents a single map data file

data/lib/abide_dev_utils/{cem → sce}/hiera_data/mapping_data/mixins.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
 module AbideDevUtils
-  module CEM
+  module Sce
     module HieraData
       module MappingData
         # Mixin module used by Mapper to implement CIS-specific mapping behavior

data/lib/abide_dev_utils/{cem → sce}/hiera_data/mapping_data.rb

@@ -1,16 +1,16 @@
 # frozen_string_literal: true
 
-require 'abide_dev_utils/cem/hiera_data/mapping_data/map_data'
-require 'abide_dev_utils/cem/hiera_data/mapping_data/mixins'
+require 'abide_dev_utils/sce/hiera_data/mapping_data/map_data'
+require 'abide_dev_utils/sce/hiera_data/mapping_data/mixins'
 
 module AbideDevUtils
-  module CEM
+  module Sce
     module HieraData
       module MappingData
         ALL_TYPES = %w[hiera_title_num number hiera_title vulnid title].freeze
         FRAMEWORK_TYPES = {
           'cis' => %w[hiera_title_num number hiera_title title],
-          'stig' => %w[hiera_title_num number hiera_title vulnid title],
+          'stig' => %w[hiera_title_num number hiera_title vulnid title]
         }.freeze
         CIS_TYPES = %w[hiera_title_num number hiera_title title].freeze
         STIG_TYPES = %w[hiera_title_num number hiera_title vulnid title].freeze
@@ -78,11 +78,11 @@ module AbideDevUtils
           def load_framework(framework)
             case framework.downcase
             when 'cis'
-              self.class.include AbideDevUtils::CEM::HieraData::MappingData::MixinCIS
-              extend AbideDevUtils::CEM::HieraData::MappingData::MixinCIS
+              self.class.include AbideDevUtils::Sce::HieraData::MappingData::MixinCIS
+              extend AbideDevUtils::Sce::HieraData::MappingData::MixinCIS
             when 'stig'
-              self.class.include AbideDevUtils::CEM::HieraData::MappingData::MixinSTIG
-              extend AbideDevUtils::CEM::HieraData::MappingData::MixinSTIG
+              self.class.include AbideDevUtils::Sce::HieraData::MappingData::MixinSTIG
+              extend AbideDevUtils::Sce::HieraData::MappingData::MixinSTIG
             else
               raise "Invalid framework: #{framework}"
             end
@@ -90,7 +90,10 @@ module AbideDevUtils
 
           def map_data_by_type(map_type)
             found_map_data = map_data.find { |x| x.type == map_type }
-            raise "Failed to find map data with type #{map_type}; Meta: #{{framework: framework, module_name: module_name}}" unless found_map_data
+            unless found_map_data
+              raise "Failed to find map data with type #{map_type}; Meta: #{{ framework: framework,
+                                                                              module_name: module_name }}"
+            end
 
             found_map_data
           end

data/lib/abide_dev_utils/{cem → sce}/hiera_data/resource_data/control.rb

@@ -2,11 +2,11 @@
 
 require 'abide_dev_utils/dot_number_comparable'
 require 'abide_dev_utils/errors'
-require 'abide_dev_utils/cem/hiera_data/mapping_data'
-require 'abide_dev_utils/cem/hiera_data/resource_data/parameters'
+require 'abide_dev_utils/sce/hiera_data/mapping_data'
+require 'abide_dev_utils/sce/hiera_data/resource_data/parameters'
 
 module AbideDevUtils
-  module CEM
+  module Sce
     module HieraData
       module ResourceData
         # Represents a singular rule in a benchmark
@@ -58,7 +58,7 @@ module AbideDevUtils
 
           def method_missing(meth, *args, &block)
             meth_s = meth.to_s
-            if AbideDevUtils::CEM::HieraData::MappingData::ALL_TYPES.include?(meth_s)
+            if AbideDevUtils::Sce::HieraData::MappingData::ALL_TYPES.include?(meth_s)
               @mapper.get(id).find { |x| @mapper.map_type(x) == meth_s }
             else
               super
@@ -66,7 +66,7 @@ module AbideDevUtils
           end
 
           def respond_to_missing?(meth, include_private = false)
-            AbideDevUtils::CEM::HieraData::MappingData::ALL_TYPES.include?(meth.to_s) || super
+            AbideDevUtils::Sce::HieraData::MappingData::ALL_TYPES.include?(meth.to_s) || super
           end
 
           def to_h
@@ -76,7 +76,7 @@ module AbideDevUtils
               alternate_ids: alternate_ids,
               levels: levels,
               profiles: profiles,
-              resource: resource,
+              resource: resource
             }.merge(parameters.to_h)
           end
 
@@ -94,7 +94,7 @@ module AbideDevUtils
 
           def validate_id_with_framework(id, framework, mapper)
             mtype = mapper.map_type(id)
-            return if AbideDevUtils::CEM::HieraData::MappingData::FRAMEWORK_TYPES[framework].include?(mtype)
+            return if AbideDevUtils::Sce::HieraData::MappingData::FRAMEWORK_TYPES[framework].include?(mtype)
 
             raise AbideDevUtils::Errors::ControlIdFrameworkMismatchError, [id, mtype, framework]
           end

data/lib/abide_dev_utils/{cem → sce}/hiera_data/resource_data/parameters.rb

@@ -3,7 +3,7 @@
 require 'set'
 
 module AbideDevUtils
-  module CEM
+  module Sce
     module HieraData
       module ResourceData
         class Parameters
@@ -40,7 +40,7 @@ module AbideDevUtils
             collection.each_with_object({}) do |(param, param_val), hsh|
               hsh[param] = {
                 raw_value: param_val,
-                display_value: param_display(param, param_val),
+                display_value: param_display(param, param_val)
               }
             end
           end
@@ -49,7 +49,7 @@ module AbideDevUtils
             {
               name: param,
               type: ruby_class_to_puppet_type(param_val.class.to_s),
-              default: param_val,
+              default: param_val
             }
           end
 

data/lib/abide_dev_utils/{cem → sce}/hiera_data/resource_data/resource.rb

@@ -2,11 +2,11 @@
 
 require 'set'
 require 'abide_dev_utils/errors'
-require 'abide_dev_utils/cem/hiera_data/resource_data/control'
-require 'abide_dev_utils/cem/hiera_data/resource_data/parameters'
+require 'abide_dev_utils/sce/hiera_data/resource_data/control'
+require 'abide_dev_utils/sce/hiera_data/resource_data/parameters'
 
 module AbideDevUtils
-  module CEM
+  module Sce
     module HieraData
       module ResourceData
         # Represents a resource data resource statement
@@ -25,21 +25,21 @@ module AbideDevUtils
             @controls ||= load_controls
           end
 
-          def cem_options
-            @cem_options ||= Parameters.new(data['cem_options'])
+          def sce_options
+            @sce_options ||= Parameters.new(data['sce_options'])
           end
 
-          def cem_protected
-            @cem_protected ||= Parameters.new(data['cem_protected'])
+          def sce_protected
+            @sce_protected ||= Parameters.new(data['sce_protected'])
           end
 
           def to_stubbed_h
             {
               title: title,
               type: type,
-              cem_options: cem_options.to_h,
-              cem_protected: cem_protected.to_h,
-              reference: to_reference,
+              sce_options: sce_options.to_h,
+              sce_protected: sce_protected.to_h,
+              reference: to_reference
             }
           end
 
@@ -51,7 +51,7 @@ module AbideDevUtils
             parray = controls.map { |x| x.parameters.to_puppet_code if x.parameters.exist? }.flatten.compact.uniq
             return "#{type} { '#{title}': }" if parray.empty? || parray.all?(&:empty?) || parray.all?("\n")
 
-            # if title == 'cem_linux::utils::packages::linux::auditd::time_change'
+            # if title == 'sce_linux::utils::packages::linux::auditd::time_change'
             #   require 'pry'
             #   binding.pry
             # end