chef 14.2.0 → 14.3.37

data/spec/scripts/ssl-serve.rb

@@ -20,26 +20,26 @@ key = OpenSSL::PKey::RSA.new(key_text)
 
 server_opts = {}
 if $ssl
-  server_opts.merge!( { :SSLEnable => true,
-                        :SSLVerifyClient => OpenSSL::SSL::VERIFY_NONE,
-                        :SSLCertificate => cert,
-                        :SSLPrivateKey => key })
+  server_opts.merge!( { SSLEnable: true,
+                        SSLVerifyClient: OpenSSL::SSL::VERIFY_NONE,
+                        SSLCertificate: cert,
+                        SSLPrivateKey: key })
 end
 
 # 5 == debug, 3 == warning
 LOGGER = WEBrick::Log.new(STDOUT, 5)
 DEFAULT_OPTIONS = {
-  :server => "webrick",
-  :Port => 9000,
-  :Host => "localhost",
-  :environment => :none,
-  :Logger => LOGGER,
-  :DocumentRoot => File.expand_path("#{Dir.tmpdir}/chef-118-sampledata")
+  server: "webrick",
+  Port: 9000,
+  Host: "localhost",
+  environment: :none,
+  Logger: LOGGER,
+  DocumentRoot: File.expand_path("#{Dir.tmpdir}/chef-118-sampledata")
   #:AccessLog => [] # Remove this option to enable the access log when debugging.
-}
+}.freeze
 
 webrick_opts = DEFAULT_OPTIONS.merge(server_opts)
-pp :webrick_opts => webrick_opts
+pp webrick_opts: webrick_opts
 
 server = WEBrick::HTTPServer.new(webrick_opts)
 trap("INT") { server.shutdown }

data/spec/spec_helper.rb

@@ -50,10 +50,10 @@ end
 require "chef"
 require "chef/knife"
 
-Dir["lib/chef/knife/**/*.rb"].
-  map { |f| f.gsub("lib/", "") }.
-  map { |f| f.gsub(%r{\.rb$}, "") }.
-  each { |f| require f }
+Dir["lib/chef/knife/**/*.rb"]
+  .map { |f| f.gsub("lib/", "") }
+  .map { |f| f.gsub(%r{\.rb$}, "") }
+  .each { |f| require f }
 
 require "chef/resource_resolver"
 require "chef/provider_resolver"
@@ -90,12 +90,12 @@ require "spec/support/shared/unit/mock_shellout"
 # Autoloads support files
 # Excludes support/platforms by default
 # Do not change the gsub.
-Dir["spec/support/**/*.rb"].
-  reject { |f| f =~ %r{^spec/support/platforms} }.
-  reject { |f| f =~ %r{^spec/support/pedant} }.
-  map { |f| f.gsub(%r{.rb$}, "") }.
-  map { |f| f.gsub(%r{spec/}, "") }.
-  each { |f| require f }
+Dir["spec/support/**/*.rb"]
+  .reject { |f| f =~ %r{^spec/support/platforms} }
+  .reject { |f| f =~ %r{^spec/support/pedant} }
+  .map { |f| f.gsub(%r{.rb$}, "") }
+  .map { |f| f.gsub(%r{spec/}, "") }
+  .each { |f| require f }
 
 OHAI_SYSTEM = Ohai::System.new
 OHAI_SYSTEM.all_plugins(["platform", "hostname", "languages/powershell"])
@@ -119,8 +119,8 @@ resource_handler_map ||= nil
 RSpec.configure do |config|
   config.include(Matchers)
   config.include(MockShellout::RSpec)
-  config.filter_run :focus => true
-  config.filter_run_excluding :external => true
+  config.filter_run focus: true
+  config.filter_run_excluding external: true
 
   # Explicitly disable :should syntax
   config.expect_with :rspec do |c|
@@ -134,83 +134,83 @@ RSpec.configure do |config|
   config.filter_run_excluding :workstation if solaris? || aix?
 
   # Tests that randomly fail, but may have value.
-  config.filter_run_excluding :volatile => true
-  config.filter_run_excluding :volatile_on_solaris => true if solaris?
-  config.filter_run_excluding :volatile_from_verify => false
-
-  config.filter_run_excluding :skip_appveyor => true if ENV["APPVEYOR"]
-  config.filter_run_excluding :appveyor_only => true unless ENV["APPVEYOR"]
-  config.filter_run_excluding :skip_travis => true if ENV["TRAVIS"]
-
-  config.filter_run_excluding :windows_only => true unless windows?
-  config.filter_run_excluding :not_supported_on_mac_osx_106 => true if mac_osx_106?
-  config.filter_run_excluding :not_supported_on_mac_osx => true if mac_osx?
-  config.filter_run_excluding :mac_osx_only => true if !mac_osx?
-  config.filter_run_excluding :not_supported_on_aix => true if aix?
-  config.filter_run_excluding :not_supported_on_solaris => true if solaris?
-  config.filter_run_excluding :not_supported_on_gce => true if gce?
-  config.filter_run_excluding :not_supported_on_nano => true if windows_nano_server?
-  config.filter_run_excluding :win2012r2_only => true unless windows_2012r2?
-  config.filter_run_excluding :windows_2008r2_or_later => true unless windows_2008r2_or_later?
-  config.filter_run_excluding :windows64_only => true unless windows64?
-  config.filter_run_excluding :windows32_only => true unless windows32?
-  config.filter_run_excluding :windows_nano_only => true unless windows_nano_server?
-  config.filter_run_excluding :windows_gte_10 => true unless windows_gte_10?
-  config.filter_run_excluding :windows_lt_10 => true if windows_gte_10?
-  config.filter_run_excluding :ruby64_only => true unless ruby_64bit?
-  config.filter_run_excluding :ruby32_only => true unless ruby_32bit?
-  config.filter_run_excluding :windows_powershell_dsc_only => true unless windows_powershell_dsc?
-  config.filter_run_excluding :windows_powershell_no_dsc_only => true unless ! windows_powershell_dsc?
-  config.filter_run_excluding :windows_domain_joined_only => true unless windows_domain_joined?
-  config.filter_run_excluding :windows_not_domain_joined_only => true if windows_domain_joined?
+  config.filter_run_excluding volatile: true
+  config.filter_run_excluding volatile_on_solaris: true if solaris?
+  config.filter_run_excluding volatile_from_verify: false
+
+  config.filter_run_excluding skip_appveyor: true if ENV["APPVEYOR"]
+  config.filter_run_excluding appveyor_only: true unless ENV["APPVEYOR"]
+  config.filter_run_excluding skip_travis: true if ENV["TRAVIS"]
+
+  config.filter_run_excluding windows_only: true unless windows?
+  config.filter_run_excluding not_supported_on_mac_osx_106: true if mac_osx_106?
+  config.filter_run_excluding not_supported_on_mac_osx: true if mac_osx?
+  config.filter_run_excluding mac_osx_only: true if !mac_osx?
+  config.filter_run_excluding not_supported_on_aix: true if aix?
+  config.filter_run_excluding not_supported_on_solaris: true if solaris?
+  config.filter_run_excluding not_supported_on_gce: true if gce?
+  config.filter_run_excluding not_supported_on_nano: true if windows_nano_server?
+  config.filter_run_excluding win2012r2_only: true unless windows_2012r2?
+  config.filter_run_excluding windows_2008r2_or_later: true unless windows_2008r2_or_later?
+  config.filter_run_excluding windows64_only: true unless windows64?
+  config.filter_run_excluding windows32_only: true unless windows32?
+  config.filter_run_excluding windows_nano_only: true unless windows_nano_server?
+  config.filter_run_excluding windows_gte_10: true unless windows_gte_10?
+  config.filter_run_excluding windows_lt_10: true if windows_gte_10?
+  config.filter_run_excluding ruby64_only: true unless ruby_64bit?
+  config.filter_run_excluding ruby32_only: true unless ruby_32bit?
+  config.filter_run_excluding windows_powershell_dsc_only: true unless windows_powershell_dsc?
+  config.filter_run_excluding windows_powershell_no_dsc_only: true unless ! windows_powershell_dsc?
+  config.filter_run_excluding windows_domain_joined_only: true unless windows_domain_joined?
+  config.filter_run_excluding windows_not_domain_joined_only: true if windows_domain_joined?
   # We think this line was causing rspec tests to not run on the Jenkins windows
   # testers. If we ever fix it we should restore it.
   # config.filter_run_excluding :windows_service_requires_assign_token => true if !STDOUT.isatty && !windows_user_right?("SeAssignPrimaryTokenPrivilege")
-  config.filter_run_excluding :windows_service_requires_assign_token => true
-  config.filter_run_excluding :solaris_only => true unless solaris?
-  config.filter_run_excluding :system_windows_service_gem_only => true unless system_windows_service_gem?
-  config.filter_run_excluding :unix_only => true unless unix?
-  config.filter_run_excluding :linux_only => true unless linux?
-  config.filter_run_excluding :aix_only => true unless aix?
-  config.filter_run_excluding :debian_family_only => true unless debian_family?
-  config.filter_run_excluding :supports_cloexec => true unless supports_cloexec?
-  config.filter_run_excluding :selinux_only => true unless selinux_enabled?
-  config.filter_run_excluding :requires_root => true unless root?
-  config.filter_run_excluding :requires_root_or_running_windows => true unless root? || windows?
-  config.filter_run_excluding :requires_unprivileged_user => true if root?
-  config.filter_run_excluding :uses_diff => true unless has_diff?
-  config.filter_run_excluding :openssl_gte_101 => true unless openssl_gte_101?
-  config.filter_run_excluding :openssl_lt_101 => true unless openssl_lt_101?
-  config.filter_run_excluding :aes_256_gcm_only => true unless aes_256_gcm?
-  config.filter_run_excluding :broken => true
-  config.filter_run_excluding :not_wpar => true unless wpar?
-  config.filter_run_excluding :not_supported_under_fips => true if fips?
-  config.filter_run_excluding :rhel => true unless rhel?
-  config.filter_run_excluding :rhel5 => true unless rhel5?
-  config.filter_run_excluding :rhel6 => true unless rhel6?
-  config.filter_run_excluding :rhel7 => true unless rhel7?
-  config.filter_run_excluding :intel_64bit => true unless intel_64bit?
-  config.filter_run_excluding :not_rhel => true if rhel?
-  config.filter_run_excluding :not_rhel5 => true if rhel5?
-  config.filter_run_excluding :not_rhel6 => true if rhel6?
-  config.filter_run_excluding :not_rhel7 => true if rhel7?
-  config.filter_run_excluding :not_intel_64bit => true if intel_64bit?
+  config.filter_run_excluding windows_service_requires_assign_token: true
+  config.filter_run_excluding solaris_only: true unless solaris?
+  config.filter_run_excluding system_windows_service_gem_only: true unless system_windows_service_gem?
+  config.filter_run_excluding unix_only: true unless unix?
+  config.filter_run_excluding linux_only: true unless linux?
+  config.filter_run_excluding aix_only: true unless aix?
+  config.filter_run_excluding debian_family_only: true unless debian_family?
+  config.filter_run_excluding supports_cloexec: true unless supports_cloexec?
+  config.filter_run_excluding selinux_only: true unless selinux_enabled?
+  config.filter_run_excluding requires_root: true unless root?
+  config.filter_run_excluding requires_root_or_running_windows: true unless root? || windows?
+  config.filter_run_excluding requires_unprivileged_user: true if root?
+  config.filter_run_excluding uses_diff: true unless has_diff?
+  config.filter_run_excluding openssl_gte_101: true unless openssl_gte_101?
+  config.filter_run_excluding openssl_lt_101: true unless openssl_lt_101?
+  config.filter_run_excluding aes_256_gcm_only: true unless aes_256_gcm?
+  config.filter_run_excluding broken: true
+  config.filter_run_excluding not_wpar: true unless wpar?
+  config.filter_run_excluding not_supported_under_fips: true if fips?
+  config.filter_run_excluding rhel: true unless rhel?
+  config.filter_run_excluding rhel5: true unless rhel5?
+  config.filter_run_excluding rhel6: true unless rhel6?
+  config.filter_run_excluding rhel7: true unless rhel7?
+  config.filter_run_excluding intel_64bit: true unless intel_64bit?
+  config.filter_run_excluding not_rhel: true if rhel?
+  config.filter_run_excluding not_rhel5: true if rhel5?
+  config.filter_run_excluding not_rhel6: true if rhel6?
+  config.filter_run_excluding not_rhel7: true if rhel7?
+  config.filter_run_excluding not_intel_64bit: true if intel_64bit?
 
   # these let us use chef: ">= 13" or ruby: "~> 2.0.0" or any other Gem::Dependency-style constraint
   config.filter_run_excluding chef: DependencyProc.with(Chef::VERSION)
   config.filter_run_excluding ruby: DependencyProc.with(RUBY_VERSION)
 
-  config.filter_run_excluding :choco_installed => true unless choco_installed?
+  config.filter_run_excluding choco_installed: true unless choco_installed?
 
   running_platform_arch = `uname -m`.strip unless windows?
 
-  config.filter_run_excluding :arch => lambda { |target_arch|
+  config.filter_run_excluding arch: lambda { |target_arch|
     running_platform_arch != target_arch
   }
 
   # Functional Resource tests that are provider-specific:
   # context "on platforms that use useradd", :provider => {:user => Chef::Provider::User::Useradd}} do #...
-  config.filter_run_excluding :provider => lambda { |criteria|
+  config.filter_run_excluding provider: lambda { |criteria|
     type, target_provider = criteria.first
 
     node = TEST_NODE.dup

data/spec/stress/win32/file_spec.rb

@@ -26,12 +26,12 @@ describe "Chef::ReservedNames::Win32::File", :windows_only do
 
   it "should not leak significant memory", :volatile do
     test = lambda { Chef::ReservedNames::Win32::File.symlink?(@path) }
-    expect(test).not_to leak_memory(:warmup => 50000, :iterations => 50000)
+    expect(test).not_to leak_memory(warmup: 50000, iterations: 50000)
   end
 
   it "should not leak handles", :volatile do
     test = lambda { Chef::ReservedNames::Win32::File.symlink?(@path) }
-    expect(test).not_to leak_handles(:warmup => 50, :iterations => 100)
+    expect(test).not_to leak_handles(warmup: 50, iterations: 100)
   end
 
 end

data/spec/stress/win32/security_spec.rb

@@ -52,7 +52,7 @@ describe "Chef::ReservedNames::Win32::Security", :windows_only do
     expect do
       sids = Chef::ReservedNames::Win32::Security::SecurableObject.new(@monkeyfoo).security_descriptor.dacl.select { |ace| ace.sid }
       GC.start
-    end.not_to leak_memory(:warmup => 50, :iterations => 100)
+    end.not_to leak_memory(warmup: 50, iterations: 100)
   end
 
   it "should not leak when creating a new ACL and setting it on a file", :volatile do
@@ -63,7 +63,7 @@ describe "Chef::ReservedNames::Win32::Security", :windows_only do
         Chef::ReservedNames::Win32::Security::ACE.access_denied(Chef::ReservedNames::Win32::Security::SID.from_account("Users"), Chef::ReservedNames::Win32::API::Security::GENERIC_ALL),
       ])
       GC.start
-    end.not_to leak_memory(:warmup => 50, :iterations => 100)
+    end.not_to leak_memory(warmup: 50, iterations: 100)
   end
 
 end

data/spec/support/platform_helpers.rb

@@ -202,7 +202,7 @@ def selinux_enabled?
   # specs independent of product.
   selinuxenabled_path = which("selinuxenabled")
   if selinuxenabled_path
-    cmd = Mixlib::ShellOut.new(selinuxenabled_path, :returns => [0, 1])
+    cmd = Mixlib::ShellOut.new(selinuxenabled_path, returns: [0, 1])
     cmd_result = cmd.run_command
     case cmd_result.exitstatus
     when 1

data/spec/support/shared/context/client.rb

@@ -11,16 +11,16 @@ shared_context "client" do
 
   let(:ohai_data) do
     {
-      :fqdn =>             fqdn,
-      :hostname =>         hostname,
-      :machinename =>      machinename,
-      :platform =>         platform,
-      :platform_version => platform_version,
+      fqdn: fqdn,
+      hostname: hostname,
+      machinename: machinename,
+      platform: platform,
+      platform_version: platform_version,
     }
   end
 
   let(:ohai_system) do
-    ohai = instance_double("Ohai::System", :all_plugins => true, :data => ohai_data, logger: logger)
+    ohai = instance_double("Ohai::System", all_plugins: true, data: ohai_data, logger: logger)
     allow(ohai).to receive(:[]) do |k|
       ohai_data[k]
     end
@@ -80,17 +80,17 @@ shared_context "a client run" do
   let(:reporting_rest_client) { double("Chef::ServerAPI (reporting client)") }
 
   let(:runner)       { instance_double("Chef::Runner") }
-  let(:audit_runner) { instance_double("Chef::Audit::Runner", :failed? => false) }
+  let(:audit_runner) { instance_double("Chef::Audit::Runner", failed?: false) }
 
   def stub_for_register
     # --Client.register
     #   Make sure Client#register thinks the client key doesn't
     #   exist, so it tries to register and create one.
     allow(File).to receive(:exists?).and_call_original
-    expect(File).to receive(:exists?).
-      with(Chef::Config[:client_key]).
-      exactly(:once).
-      and_return(api_client_exists?)
+    expect(File).to receive(:exists?)
+      .with(Chef::Config[:client_key])
+      .exactly(:once)
+      .and_return(api_client_exists?)
 
     unless api_client_exists?
       #   Client.register will register with the validation client name.
@@ -99,21 +99,21 @@ shared_context "a client run" do
   end
 
   def stub_for_data_collector_init
-    expect(Chef::ServerAPI).to receive(:new).
-      with(Chef::Config[:data_collector][:server_url], validate_utf8: false).
-      exactly(:once).
-      and_return(http_data_collector)
+    expect(Chef::ServerAPI).to receive(:new)
+      .with(Chef::Config[:data_collector][:server_url], validate_utf8: false)
+      .exactly(:once)
+      .and_return(http_data_collector)
   end
 
   def stub_for_node_load
     #   Client.register will then turn around create another
     #   Chef::ServerAPI object, this time with the client key it got from the
     #   previous step.
-    expect(Chef::ServerAPI).to receive(:new).
-      with(Chef::Config[:chef_server_url], client_name: fqdn,
-                                           signing_key_filename: Chef::Config[:client_key]).
-      exactly(:once).
-      and_return(http_node_load)
+    expect(Chef::ServerAPI).to receive(:new)
+      .with(Chef::Config[:chef_server_url], client_name: fqdn,
+                                           signing_key_filename: Chef::Config[:client_key])
+      .exactly(:once)
+      .and_return(http_node_load)
 
     # --Client#build_node
     #   looks up the node, which we will return, then later saves it.
@@ -135,9 +135,9 @@ shared_context "a client run" do
     #
     expect_any_instance_of(Chef::CookbookSynchronizer).to receive(:sync_cookbooks)
     expect(Chef::ServerAPI).to receive(:new).with(Chef::Config[:chef_server_url], version_class: Chef::CookbookManifestVersions).and_return(http_cookbook_sync)
-    expect(http_cookbook_sync).to receive(:post).
-      with("environments/_default/cookbook_versions", { :run_list => [] }).
-      and_return({})
+    expect(http_cookbook_sync).to receive(:post)
+      .with("environments/_default/cookbook_versions", { run_list: [] })
+      .and_return({})
   end
 
   def stub_for_required_recipe
@@ -250,8 +250,8 @@ end
 
 shared_context "audit phase completed with failed controls" do
   let(:audit_runner) do
-    instance_double("Chef::Audit::Runner", :failed? => true,
-                                           :num_failed => 1, :num_total => 3) end
+    instance_double("Chef::Audit::Runner", failed?: true,
+                                           num_failed: 1, num_total: 3) end
 
   let(:audit_error) do
     err = Chef::Exceptions::AuditsFailed.new(audit_runner.num_failed, audit_runner.num_total)

data/spec/support/shared/functional/securable_resource.rb

@@ -95,7 +95,7 @@ shared_context "use Windows permissions", :windows_only do
   def extract_ace_properties(aces)
     hashes = []
     aces.each do |ace|
-      hashes << { :mask => ace.mask, :type => ace.type, :flags => ace.flags }
+      hashes << { mask: ace.mask, type: ace.type, flags: ace.flags }
     end
     hashes
   end
@@ -103,36 +103,36 @@ shared_context "use Windows permissions", :windows_only do
   # Standard expected rights
   let(:expected_read_perms) do
     {
-      :generic => Chef::ReservedNames::Win32::API::Security::GENERIC_READ,
-      :specific => Chef::ReservedNames::Win32::API::Security::FILE_GENERIC_READ,
+      generic: Chef::ReservedNames::Win32::API::Security::GENERIC_READ,
+      specific: Chef::ReservedNames::Win32::API::Security::FILE_GENERIC_READ,
     }
   end
 
   let(:expected_read_execute_perms) do
     {
-      :generic => Chef::ReservedNames::Win32::API::Security::GENERIC_READ | Chef::ReservedNames::Win32::API::Security::GENERIC_EXECUTE,
-      :specific => Chef::ReservedNames::Win32::API::Security::FILE_GENERIC_READ | Chef::ReservedNames::Win32::API::Security::FILE_GENERIC_EXECUTE,
+      generic: Chef::ReservedNames::Win32::API::Security::GENERIC_READ | Chef::ReservedNames::Win32::API::Security::GENERIC_EXECUTE,
+      specific: Chef::ReservedNames::Win32::API::Security::FILE_GENERIC_READ | Chef::ReservedNames::Win32::API::Security::FILE_GENERIC_EXECUTE,
     }
   end
 
   let(:expected_write_perms) do
     {
-      :generic => Chef::ReservedNames::Win32::API::Security::GENERIC_WRITE,
-      :specific => Chef::ReservedNames::Win32::API::Security::FILE_GENERIC_WRITE,
+      generic: Chef::ReservedNames::Win32::API::Security::GENERIC_WRITE,
+      specific: Chef::ReservedNames::Win32::API::Security::FILE_GENERIC_WRITE,
     }
   end
 
   let(:expected_modify_perms) do
     {
-      :generic => Chef::ReservedNames::Win32::API::Security::GENERIC_READ | Chef::ReservedNames::Win32::API::Security::GENERIC_WRITE | Chef::ReservedNames::Win32::API::Security::GENERIC_EXECUTE | Chef::ReservedNames::Win32::API::Security::DELETE,
-      :specific => Chef::ReservedNames::Win32::API::Security::FILE_GENERIC_READ | Chef::ReservedNames::Win32::API::Security::FILE_GENERIC_WRITE | Chef::ReservedNames::Win32::API::Security::FILE_GENERIC_EXECUTE | Chef::ReservedNames::Win32::API::Security::DELETE,
+      generic: Chef::ReservedNames::Win32::API::Security::GENERIC_READ | Chef::ReservedNames::Win32::API::Security::GENERIC_WRITE | Chef::ReservedNames::Win32::API::Security::GENERIC_EXECUTE | Chef::ReservedNames::Win32::API::Security::DELETE,
+      specific: Chef::ReservedNames::Win32::API::Security::FILE_GENERIC_READ | Chef::ReservedNames::Win32::API::Security::FILE_GENERIC_WRITE | Chef::ReservedNames::Win32::API::Security::FILE_GENERIC_EXECUTE | Chef::ReservedNames::Win32::API::Security::DELETE,
     }
   end
 
   let(:expected_full_control_perms) do
     {
-      :generic => Chef::ReservedNames::Win32::API::Security::GENERIC_ALL,
-      :specific => Chef::ReservedNames::Win32::API::Security::FILE_ALL_ACCESS,
+      generic: Chef::ReservedNames::Win32::API::Security::GENERIC_ALL,
+      specific: Chef::ReservedNames::Win32::API::Security::FILE_ALL_ACCESS,
     }
   end
 
@@ -443,8 +443,8 @@ shared_examples_for "a securable resource without existing target" do
       end
 
       it "respects mode in string form as an octal number" do
-        #on windows, mode cannot modify owner and/or group permissons
-        #unless the owner and/or group as appropriate is specified
+        # on windows, mode cannot modify owner and/or group permissons
+        # unless the owner and/or group as appropriate is specified
         resource.mode "400"
         resource.owner "Guest"
         resource.group "Everyone"

data/spec/support/shared/functional/securable_resource_with_reporting.rb

@@ -19,7 +19,7 @@ ALL_EXPANDED_PERMISSIONS = ["generic read",
                             "execute / traverse",
                             "delete child",
                             "read attributes",
-                            "write attributes"]
+                            "write attributes"].freeze
 
 shared_examples_for "a securable resource with reporting" do
 
@@ -36,7 +36,7 @@ shared_examples_for "a securable resource with reporting" do
   # umask
   # let(:default_mode) { (0666 & ~File.umask).to_s(8) }
 
-  describe "reading file security metadata for reporting on unix", :unix_only => true do
+  describe "reading file security metadata for reporting on unix", unix_only: true do
     # According to POSIX standard created files get either the
     # effective gid of the process or inherits the gid of the parent
     # directory based on file system. Since it's hard to guess what
@@ -70,7 +70,7 @@ shared_examples_for "a securable resource with reporting" do
         end
       end
 
-      context "and owner is specified with a String (username) in new_resource", :requires_root => true do
+      context "and owner is specified with a String (username) in new_resource", requires_root: true do
 
         # TODO/bug: duplicated from the "securable resource" tests
 
@@ -91,7 +91,7 @@ shared_examples_for "a securable resource with reporting" do
 
       end
 
-      context "and owner is specified with an Integer (uid) in new_resource", :requires_root => true do
+      context "and owner is specified with an Integer (uid) in new_resource", requires_root: true do
 
         # TODO: duplicated from "securable resource"
         if ohai[:platform] == "aix"
@@ -113,7 +113,7 @@ shared_examples_for "a securable resource with reporting" do
         end
       end
 
-      context "and group is specified with a String (group name)", :requires_root => true do
+      context "and group is specified with a String (group name)", requires_root: true do
 
         let(:expected_group_name) { Etc.getgrent.name }
 
@@ -128,7 +128,7 @@ shared_examples_for "a securable resource with reporting" do
 
       end
 
-      context "and group is specified with an Integer (gid)", :requires_root => true do
+      context "and group is specified with an Integer (gid)", requires_root: true do
         let(:expected_gid) { Etc.getgrent.gid }
 
         before do