foreman_openscap 0.2.1 → 0.3.0

data/app/overrides/hosts/index/host_arf_report.rb

@@ -0,0 +1,5 @@
+
+Deface::Override.new(:virtual_path  => "hosts/_list",
+                     :name          => "add_compliance_host_data",
+                     :surround_contents => "td[@class='ellipsis']",
+                     :partial       =>  "scaptimony_arf_reports/host_report")

data/app/services/scaptimony/policy_dashboard/data.rb

@@ -0,0 +1,30 @@
+module Scaptimony::PolicyDashboard
+  class Data
+    attr_reader :report
+
+    def initialize(policy, filter = "")
+      @policy = policy
+      @filter = filter
+      @report = {}
+      fetch_data
+    end
+
+    private
+    attr_writer :report
+
+    def hosts
+      @hosts ||= Host.authorized(:view_hosts, Host)
+    end
+
+    def fetch_data
+      report.update(
+        {:compliant_hosts => @policy.assets.hosts.comply_with(@policy).count,
+         :incompliant_hosts => @policy.assets.hosts.incomply_with(@policy).count,
+         :inconclusive_hosts => @policy.assets.hosts.inconclusive_with(@policy).count,
+         :report_missing => @policy.assets.hosts.policy_reports_missing(@policy).count,
+         :assigned_hosts => @policy.assets.hosts.count,
+         :unassigned_hosts => hosts.count - @policy.assets.hosts.count
+        })
+    end
+  end
+end

data/app/services/scaptimony/policy_dashboard/loader.rb

@@ -0,0 +1,20 @@
+#
+# Copyright (c) 2014 Red Hat Inc.
+#
+# This software is licensed to you under the GNU General Public License,
+# version 3 (GPLv3). There is NO WARRANTY for this software, express or
+# implied, including the implied warranties of MERCHANTABILITY or FITNESS
+# FOR A PARTICULAR PURPOSE. You should have received a copy of GPLv3
+# along with this software; if not, see http://www.gnu.org/licenses/gpl.txt
+#
+
+module Scaptimony::PolicyDashboard
+  class Loader
+    def self.load
+      Scaptimony::PolicyDashboard::Manager.map do |dashboard|
+        dashboard.widget 'policy_status_widget', :row=>1,:col=>1,:sizex=>8,:sizey=>1,:name=> N_('Status table')
+        dashboard.widget 'policy_chart_widget',  :row=>1,:col=>9,:sizex=>4,:sizey=>1,:name=> N_('Status chart')
+      end
+    end
+  end
+end

data/app/services/scaptimony/policy_dashboard/manager.rb

@@ -0,0 +1,32 @@
+#
+# Copyright (c) 2014 Red Hat Inc.
+#
+# This software is licensed to you under the GNU General Public License,
+# version 3 (GPLv3). There is NO WARRANTY for this software, express or
+# implied, including the implied warranties of MERCHANTABILITY or FITNESS
+# FOR A PARTICULAR PURPOSE. You should have received a copy of GPLv3
+# along with this software; if not, see http://www.gnu.org/licenses/gpl.txt
+#
+
+module Scaptimony::PolicyDashboard
+  module Manager
+    class << self
+      def map
+        @widgets ||= []
+        mapper = Mapper.new(@widgets)
+        if block_given?
+          yield mapper
+        else
+          mapper
+        end
+      end
+
+      def widgets
+        @widgets ||= Scaptimony::PolicyDashboard::Loader.load
+      end
+    end
+
+    class Mapper < ::Dashboard::Manager::Mapper
+    end
+  end
+end

data/app/services/scaptimony/report_dashboard/data.rb

@@ -0,0 +1,37 @@
+module Scaptimony::ReportDashboard
+  class Data
+    attr_reader :report
+
+    def initialize(filter = "")
+      @filter = filter
+      @report = {}
+      fetch_data
+    end
+
+    private
+    attr_writer :report
+    attr_accessor :filter
+
+    def fetch_data
+      report.update(
+          {
+            :passed  => passed_breakdowns,
+            :failed  => failed_breakdowns,
+            :othered => othered_breakdowns
+          }
+      )
+    end
+
+    def passed_breakdowns
+      (::Scaptimony::ArfReportBreakdown.sum(:passed)).to_f
+    end
+
+    def failed_breakdowns
+      (::Scaptimony::ArfReportBreakdown.sum(:failed)).to_f
+    end
+
+    def othered_breakdowns
+      (::Scaptimony::ArfReportBreakdown.sum(:othered)).to_f
+    end
+  end
+end

data/app/views/dashboard/_foreman_openscap_host_reports_widget.html.erb

@@ -0,0 +1,24 @@
+<h4 class="ca"><%= _('Latest compliance reports') %></h4>
+<% latest_reports = Scaptimony::ArfReport.latest %>
+<% if latest_reports.empty? %>
+  <p class="ca"><%= _("No reports available") %></p>
+<% else %>
+  <table class="table table-striped ellipsis">
+    <tr>
+      <th><%= _('Host') %></th>
+      <th><%= _('Policy') %></th>
+      <%= translated_header(s_('Passed|P'), _('Passed')).html_safe %>
+      <%= translated_header(s_('Failed|F'), _('Failed')).html_safe %>
+      <%= translated_header(s_('Othered|O'), _('Othered')).html_safe %>
+    </tr>
+    <% latest_reports.each do |report| %>
+      <tr>
+        <td><%= link_to h(report.host.name), scaptimony_arf_report_path(report) %></td>
+        <td><%= link_to h(report.policy.name), scaptimony_policy_dashboard_scaptimony_policy_path(report.policy) %></td>
+        <td><%= report_event_column(report.passed, "label-success")  %></td>
+        <td><%= report_event_column(report.failed, "label-danger")  %></td>
+        <td><%= report_event_column(report.othered, "label-info")  %></td>
+      </tr>
+    <% end %>
+  </table>
+<% end %>

data/app/views/dashboard/_foreman_openscap_reports_breakdown_widget.html.erb

@@ -0,0 +1,3 @@
+<h4 class="header ca"><%= _('Compliance reports breakdown') %></h4>
+<% report = Scaptimony::ReportDashboard::Data.new().report %>
+<%= reports_breakdown_chart(report, :class => 'statistics-pie small') %>

data/app/views/scaptimony_arf_reports/_host_report.html.erb

@@ -0,0 +1,8 @@
+<% if host.arf_reports.any? %>
+  <% if host.arf_reports.search_for('failed > 0').blank? %>
+    <%= link_to(report_event_column('O', "label-success"), scaptimony_arf_reports_path(:search => "host=#{host.name}")) %>
+  <% else %>
+    <%= link_to(report_event_column('F', "label-danger"), scaptimony_arf_reports_path(:search => "host=#{host.name}")) %>
+  <% end %>
+<% end %>
+<%= render_original %>

data/app/views/scaptimony_arf_reports/_list.html.erb

@@ -9,8 +9,8 @@
   </tr>
   <% for arf_report in @arf_reports %>
     <tr>
-      <td><%= name_column(arf_report.asset.host) %></td>
-      <td><%= _("%s ago") % time_ago_in_words(arf_report.date.getlocal) %></td>
+      <td><%= name_column(arf_report.host) %></td>
+      <td><%= _("%s ago") % time_ago_in_words(arf_report.date) %></td>
       <td><%= report_arf_column(arf_report.passed, "label-info") %></th>
       <td><%= report_arf_column(arf_report.failed, "label-danger") %></th>
       <td><%= report_arf_column(arf_report.othered, "label-warning") %></th>

data/app/views/scaptimony_arf_reports/show.html.erb

@@ -0,0 +1,3 @@
+<div class="row">
+  <iframe style="min-height: 800px" height="100%" width="100%" frameborder="0" src="<%= parse_scaptimony_arf_report_path(@arf_report) %>"></iframe>
+</div>

data/app/views/scaptimony_policies/_form.html.erb

@@ -1,4 +1,5 @@
-<%= javascript 'policy_edit' %>
+<%= javascript 'foreman_openscap/policy_edit' %>
+<%= javascript 'foreman_openscap/period_selector' %>
 <%= form_for @policy,
     :url => (@policy.id? ? scaptimony_policy_path(:id => @policy.id) : scaptimony_policies_path) do |f| %>
   <%= base_errors_for @policy %>
@@ -7,11 +8,18 @@
     <li class="active"><a href="#primary" data-toggle="tab"><%= _("General") %></a></li>
     <li><a href="#scap_content" data-toggle="tab"><%= _("SCAP Content") %></a></li>
     <li><a href="#scap_schedule" data-toggle="tab"><%= _("Schedule") %></a></li>
+    <% if show_location_tab? %>
+      <li><a href='#locations' data-toggle='tab'><%= _('Locations') %></a></li>
+    <% end %>
+    <% if show_organization_tab? %>
+      <li><a href='#organizations' data-toggle='tab'><%= _('Organizations') %></a></li>
+    <% end %>
+    <li><a href='#hostgroups' data-toggle='tab'><%= _('Hostgroups') %></a></li>
   </ul>
   <div class="tab-content">
     <div class="tab-pane active" id="primary">
       <%= text_f(f, :name) %>
-      <%= text_f(f, :description, :size => "col-md-8" ) %>
+      <%= textarea_f(f, :description, :rows => :auto ) %>
     </div>
     <div class="tab-pane" id="scap_content">
       <%= select_f f, :scap_content_id, Scaptimony::ScapContent.all, :id, :title,
@@ -31,8 +39,19 @@
       </span>
     </div>
     <div class="tab-pane" id="scap_schedule">
-      <%= text_f(f, :period) %>
-      <%= text_f(f, :weekday) %>
+      <%= select_f(f, :period, %w[Weekly Monthly Custom], :downcase, :to_s,
+                   { :include_blank => _('Choose period') },
+                   { :onchange => 'period_selected(this)' }) %>
+      <%= select_f(f, :weekday, Date::DAYNAMES, :downcase, :to_s, :include_blank => _('Choose weekday')) %>
+      <%= text_f(f, :day_of_month, :help_inline => _('Number of a day in month, note that not all months have same count of days')) %>
+      <%= text_f(f, :cron_line, :help_inline => _('You can specify custom cron line, e.g. "0  3  *  *  *", separate each of 5 values by space')) %>
+    </div>
+
+    <%= render 'taxonomies/loc_org_tabs', :f => f, :obj => @policy %>
+    <div class="tab-pane" id="hostgroups">
+      <%= multiple_selects f, :hostgroups, Hostgroup,
+                           @policy.hostgroup_ids,
+                           {:disabled => @policy.used_hostgroup_ids } %>
     </div>
     <%= submit_or_cancel f %>
   </div>

data/app/views/scaptimony_policies/_list.html.erb

@@ -1,4 +1,4 @@
-<table class="table table-bordered table-striped table-two-pane">
+<table class="table table-bordered table-striped">
   <tr>
     <th>Name</th>
     <th>Content</th>
@@ -8,9 +8,7 @@
   <% for policy in @policies %>
     <tr>
       <td>
-          <%= link_to_if_authorized policy.name,
-                  hash_for_edit_scaptimony_policy_path(:id => policy).merge(
-                       :auth_object => policy, :authorizer => authorizer) %>
+          <%= link_to policy.name, scaptimony_policy_dashboard_scaptimony_policy_path(:id => policy.id) %>
       </td>
       <td>
           <% if !policy.scap_content.nil? %>

data/app/views/scaptimony_policies/create.html.erb

@@ -0,0 +1,2 @@
+<% title _("New Compliance Policy") %>
+<%= render :partial => "scaptimony_policies/steps/step_form" %>

data/app/views/scaptimony_policies/edit.html.erb

@@ -1,3 +1,2 @@
 <% title _("Edit Compliance Policy") %>
-
-<%= render :partial => 'form' %>
+<%= render :partial => "form" %>

data/app/views/scaptimony_policies/index.html.erb

@@ -1,4 +1,4 @@
-<%= javascript 'policy_edit' %>
+<%= javascript 'foreman_openscap/policy_edit' %>
 <% title _("Compliance Policies") %>
 
 <% title_actions(

data/app/views/scaptimony_policies/new.html.erb

@@ -1,3 +1,2 @@
 <% title _("New Compliance Policy") %>
-
-<%= render :partial => 'form' %>
+<%= render :partial => "scaptimony_policies/steps/step_form" %>

data/app/views/scaptimony_policies/select_multiple_hosts.html.erb

@@ -0,0 +1,8 @@
+<%= render 'hosts/selected_hosts', :hosts => @hosts %>
+
+<%= form_for :policy,
+             :url => update_multiple_hosts_scaptimony_policies_path(:host_ids => params[:host_ids]) do |f| %>
+    <%= selectable_f f, :id, [[_("Select Compliance Policy"), "disabled"],
+                             ] + Scaptimony::Policy.all.map{|e| [e.name, e.id]},{},
+                        :onchange => "toggle_multiple_ok_button(this)" %>
+<% end %>

data/app/views/scaptimony_policies/show.html.erb

@@ -0,0 +1,3 @@
+<div class="row">
+  <iframe style="min-height: 800px" height="100%" width="100%" frameborder="0" src="<%= parse_scaptimony_policy_path(@policy) %>"></iframe>
+</div>

data/app/views/scaptimony_policies/steps/_create_policy_form.html.erb

@@ -0,0 +1,5 @@
+<div class="tab-pane <%= show_partial_wizard(step) %>" id="create-policy">
+  <%= wizard_header @policy.step_index, *@policy.steps %>
+  <%= text_f(f, :name) %>
+  <%= text_f(f, :description, :size => "col-md-8" ) %>
+</div>

data/app/views/scaptimony_policies/steps/_hostgroups_form.html.erb

@@ -0,0 +1,7 @@
+<div class="tab-pane <%= show_partial_wizard(step) %>" id="hostgroups">
+  <%= wizard_header @policy.step_index, *@policy.steps %>
+  <% select_options ||= {} %>
+  <%= multiple_selects f, :hostgroups, Hostgroup,
+                       @policy.hostgroup_ids,
+                       {:disabled => @policy.used_hostgroup_ids }.merge!(select_options) %>
+</div>

data/app/views/scaptimony_policies/steps/_locations_form.html.erb

@@ -0,0 +1,13 @@
+<% select_options ||= {} %>
+<% html_options ||= {} %>
+<% html_options[:location] ||= {} %>
+<% obj = @policy %>
+<% if show_location_tab? %>
+  <div class="tab-pane <%= show_partial_wizard(step) %>" id="locations">
+    <%= wizard_header @policy.step_index, *@policy.steps %>
+    <%= location_selects f, obj.used_or_selected_location_ids,
+                         {:disabled => obj.used_location_ids}.merge!(select_options),
+                         {:data => {:descendants => obj.children_of_selected_location_ids,
+                                    :useds       => obj.used_location_ids}}.merge!(html_options[:location]) %>
+  </div>
+<% end %>

data/app/views/scaptimony_policies/steps/_organizations_form.html.erb

@@ -0,0 +1,13 @@
+<% select_options ||= {} %>
+<% html_options ||= {} %>
+<% html_options[:organization] ||= {} %>
+<% obj = @policy %>
+<% if show_organization_tab? %>
+  <div class="tab-pane <%= show_partial_wizard(step) %>" id="organizations">
+    <%= wizard_header @policy.step_index, *@policy.steps %>
+    <%= organization_selects f, obj.used_or_selected_organization_ids,
+                             {:disabled => obj.used_organization_ids}.merge!(select_options),
+                             {:data => {:descendants => obj.children_of_selected_organization_ids,
+                                        :useds       => obj.used_organization_ids}}.merge!(html_options[:organization]) %>
+  </div>
+<% end %>

data/app/views/scaptimony_policies/steps/_scap_content_form.html.erb

@@ -0,0 +1,21 @@
+<div class="tab-pane <%= show_partial_wizard(step) %>" id="scap_content">
+  <%= wizard_header @policy.step_index, *@policy.steps %>
+
+  <%= select_f f, :scap_content_id, Scaptimony::ScapContent.all, :id, :title,
+               {:include_blank => _("Choose existing SCAP Content")},
+               {:label => _("SCAP Content"),
+                :onchange => 'scap_content_selected(this);',
+                :'data-url' => method_path('scap_content_selected')}
+  %>
+  <span id="scap_content_profile_select">
+    <%= select_f f, :scap_content_profile_id, profiles_selection, :id, :title,
+                 {:selected => @policy.scap_content_profile_id,
+                  :include_blank => _("Default XCCDF profile")},
+                 {:label => _("XCCDF Profile"),
+                  :disabled => profiles_selection.empty?,
+                  :help_inline => :indicator}
+    %>
+  </span>
+  <p class="alert alert-info"><%= _('Notice: Ensure the selected SCAP content exists on your hosts.') %></p>
+</div>
+

data/app/views/scaptimony_policies/steps/_schedule_form.html.erb

@@ -0,0 +1,11 @@
+<%= javascript 'foreman_openscap/period_selector' %>
+
+<div class="tab-pane <%= show_partial_wizard(step) %>" id="scap_schedule">
+  <%= wizard_header @policy.step_index, *@policy.steps %>
+  <%= select_f(f, :period, %w[Weekly Monthly Custom], :downcase, :to_s,
+               { :include_blank => _('Choose period') },
+               { :onchange => 'period_selected(this)' }) %>
+  <%= select_f(f, :weekday, Date::DAYNAMES, :downcase, :to_s, :include_blank => _('Choose weekday')) %>
+  <%= text_f(f, :day_of_month, :help_inline => _('Number of a day in month, note that not all months have same count of days')) %>
+  <%= text_f(f, :cron_line, :help_inline => _('You can specify custom cron line, e.g. "0  3  *  *  *", separate each of 5 values by space')) %>
+</div>

data/app/views/scaptimony_policies/steps/_step_form.html.erb

@@ -0,0 +1,11 @@
+<%= javascript 'foreman_openscap/policy_edit' %>
+<%= stylesheet 'foreman_openscap/policy' %>
+<%= form_for @policy,
+             :url => (@policy.id? ? scaptimony_policy_path(:id => @policy.id) : scaptimony_policies_path) do |f| %>
+  <%= base_errors_for @policy %>
+  <%= f.hidden_field(:current_step, :value => @policy.next_step) unless @policy.current_step.blank? %>
+  <% @policy.steps.each do | step | %>
+    <%= render :partial => "scaptimony_policies/steps/#{step.downcase.tr(' ', '_')}_form", :locals => {:f => f, :step => step} %>
+  <% end %>
+  <%= submit_or_cancel_policy(f, (_('Next') unless @policy.last_step?) ) %>
+<% end %>

data/app/views/scaptimony_policy_dashboard/_policy_chart_widget.html.erb

@@ -0,0 +1,4 @@
+<div id='status-chart'>
+  <h4 class="header ca"><%= _('Host Breakdown Chart') %></h4>
+  <%= host_breakdown_chart(@report, :class => 'statistics-pie small') %>
+</div>

data/app/views/scaptimony_policy_dashboard/_policy_reports.html.erb

@@ -0,0 +1,24 @@
+<table class="table table-bordered table-striped ellipsis">
+  <tr>
+    <th><%= _('Host') %></th>
+    <th><%= _("Date") %></th>
+    <th><%= _("Passed") %></th>
+    <th><%= _("Failed") %></th>
+    <th><%= _("Other") %></th>
+    <th></th>
+  </tr>
+  <% for arf_report in @policy.arf_reports.latest %>
+    <tr>
+      <td><%= name_column(arf_report.host) %></td>
+      <td><%= _("%s ago") % time_ago_in_words(arf_report.date) %></td>
+      <td><%= report_arf_column(arf_report.passed, "label-info") %></th>
+      <td><%= report_arf_column(arf_report.failed, "label-danger") %></th>
+      <td><%= report_arf_column(arf_report.othered, "label-warning") %></th>
+      <td>
+        <%= action_buttons(
+                link_to(_("View Report"), hash_for_scaptimony_arf_report_path(:id => arf_report.id))
+            ) %>
+      </td>
+    </tr>
+  <% end %>
+</table>

data/app/views/scaptimony_policy_dashboard/_policy_status_widget.html.erb

@@ -0,0 +1,12 @@
+<div id='status-table'>
+  <h4 class="header"><%= _('Hosts Breakdown') %></h4>
+  <ul>
+    <%= status_link _('Compliant with the policy'), :compliant_hosts, scaptimony_arf_reports_path(:search => "comply_with = #{@policy.name}") %>
+    <%= status_link _('Not compliant with the policy'), :incompliant_hosts, scaptimony_arf_reports_path(:search => "not_comply_with = #{@policy.name}") %>
+    <%= status_link _('Inconclusive results'), :inconclusive_hosts, scaptimony_arf_reports_path(:search => " inconclusive_with = #{@policy.name}") %>
+    <%= status_link _('Never audited'), :report_missing, hosts_path(:search => "compliance_report_missing_for = #{@policy.name}") %>
+    <h4 class="total">
+      <%= link_to(_("Total hosts: %s") % @report[:assigned_hosts], hosts_path(:search => "compliance_policy = #{@policy.name}")) %>
+    </h4>
+  </ul>
+</div>

data/app/views/scaptimony_policy_dashboard/index.html.erb

@@ -0,0 +1,26 @@
+<%= javascript 'dashboard' %>
+
+<% title _("Compliance policy: %s") % @policy.name %>
+
+<div id='dashboard' class="row gridster">
+  <ul>
+    <%= policy_widget_list.map do |widget|
+      content_tag(:li, render(widget.id), :data => {
+                         :id    => widget.id,
+                         :name  => widget.name || widget.id,
+                         :row   => widget.row,
+                         :col   => widget.col,
+                         :sizex => widget.sizex,
+                         :sizey => widget.sizey,
+                         :hide  => widget.hide
+                     })
+    end.join(' ').html_safe
+    %>
+  </ul>
+</div>
+<% if @policy.arf_reports.any? %>
+  <div class="row gridster">
+    <%= _("Latest reports for policy: %s") % @policy.name %>
+    <%= render :partial => 'policy_reports' %>
+  </div>
+<% end %>