inspec-core 2.1.67

data/lib/inspec/reporters/json.rb

@@ -0,0 +1,116 @@
+# encoding: utf-8
+
+require 'json'
+
+module Inspec::Reporters
+  class Json < Base
+    def render
+      output(report.to_json, false)
+    end
+
+    def report
+      {
+        platform: platform,
+        profiles: profiles,
+        statistics: {
+          duration: run_data[:statistics][:duration],
+        },
+        version: run_data[:version],
+      }
+    end
+
+    private
+
+    def platform
+      {
+        name: run_data[:platform][:name],
+        release: run_data[:platform][:release],
+      }
+    end
+
+    def profile_results(control)
+      results = []
+      return results if control[:results].nil?
+
+      control[:results].each do |r|
+        result = {
+          status: r[:status],
+          code_desc: r[:code_desc],
+          run_time: r[:run_time],
+          start_time: r[:start_time],
+        }
+        result[:resource] = r[:resource] if r[:resource]
+        result[:skip_message] = r[:skip_message] if r[:skip_message]
+        result[:message] = r[:message] if r[:message]
+        result[:exception] = r[:exception] if r[:exception]
+        result[:backtrace] = r[:backtrace] if r[:backtrace]
+
+        results << result
+      end
+      results
+    end
+
+    def profile_controls(profile)
+      controls = []
+      return controls if profile[:controls].nil?
+
+      profile[:controls].each do |c|
+        control = {
+          id: c[:id],
+          title: c[:title],
+          desc: c[:desc],
+          impact: c[:impact],
+          refs: c[:refs],
+          tags: c[:tags],
+          code: c[:code],
+          source_location: {
+            line: c[:source_location][:line],
+            ref: c[:source_location][:ref],
+          },
+          results: profile_results(c),
+        }
+        controls << control
+      end
+      controls
+    end
+
+    def profile_groups(profile)
+      groups = []
+      return groups if profile[:groups].nil?
+
+      profile[:groups].each do |g|
+        group = {
+          id: g[:id],
+          controls: g[:controls],
+        }
+        group[:title] = g[:title] if g[:title]
+
+        groups << group
+      end
+      groups
+    end
+
+    def profiles
+      profiles = []
+      run_data[:profiles].each do |p|
+        profile = {
+          name: p[:name],
+          version: p[:version],
+          sha256: p[:sha256],
+          title: p[:title],
+          maintainer: p[:maintainer],
+          summary: p[:summary],
+          license: p[:license],
+          copyright: p[:copyright],
+          copyright_email: p[:copyright_email],
+          supports: p[:supports],
+          attributes: p[:attributes],
+          groups: profile_groups(p),
+          controls: profile_controls(p),
+        }
+        profiles << profile.reject { |_k, v| v.nil? }
+      end
+      profiles
+    end
+  end
+end

data/lib/inspec/reporters/json_min.rb

@@ -0,0 +1,48 @@
+# encoding: utf-8
+
+require 'json'
+
+module Inspec::Reporters
+  class JsonMin < Base
+    def render
+      output(report.to_json, false)
+    end
+
+    def report # rubocop:disable Metrics/AbcSize
+      report = {
+        controls: [],
+        statistics: { duration: run_data[:statistics][:duration] },
+        version: run_data[:version],
+      }
+
+      # collect all test results and add them to the report
+      run_data[:profiles].each do |profile|
+        profile_id = profile[:name]
+        next unless profile[:controls]
+        profile[:controls].each do |control|
+          control_id = control[:id]
+          next unless control[:results]
+          control[:results].each do |result|
+            result_for_report = {
+              id: control_id,
+              profile_id: profile_id,
+              profile_sha256: profile[:sha256],
+              status: result[:status],
+              code_desc: result[:code_desc],
+            }
+
+            result_for_report[:skip_message] = result[:skip_message] if result.key?(:skip_message)
+            result_for_report[:resource] = result[:resource] if result.key?(:resource)
+            result_for_report[:message] = result[:message] if result.key?(:message)
+            result_for_report[:exception] = result[:exception] if result.key?(:exception)
+            result_for_report[:backtrace] = result[:backtrace] if result.key?(:backtrace)
+
+            report[:controls] << result_for_report
+          end
+        end
+      end
+
+      report
+    end
+  end
+end

data/lib/inspec/reporters/junit.rb

@@ -0,0 +1,78 @@
+# encoding: utf-8
+
+module Inspec::Reporters
+  class Junit < Base
+    def render
+      require 'rexml/document'
+      xml_output = REXML::Document.new
+      xml_output.add(REXML::XMLDecl.new)
+
+      testsuites = REXML::Element.new('testsuites')
+      xml_output.add(testsuites)
+
+      run_data[:profiles].each do |profile|
+        testsuites.add(build_profile_xml(profile))
+      end
+
+      formatter = REXML::Formatters::Pretty.new
+      formatter.compact = true
+      output(formatter.write(xml_output.xml_decl, ''))
+      output(formatter.write(xml_output.root, ''))
+    end
+
+    private
+
+    def build_profile_xml(profile)
+      profile_xml = REXML::Element.new('testsuite')
+      profile_xml.add_attribute('name', profile[:name])
+      profile_xml.add_attribute('tests', count_profile_tests(profile))
+      profile_xml.add_attribute('failed', count_profile_failed_tests(profile))
+
+      profile[:controls].each do |control|
+        next if control[:results].nil?
+
+        control[:results].each do |result|
+          profile_xml.add(build_result_xml(profile[:name], control, result))
+        end
+      end
+
+      profile_xml
+    end
+
+    def build_result_xml(profile_name, control, result)
+      result_xml = REXML::Element.new('testcase')
+      result_xml.add_attribute('name', result[:code_desc])
+      result_xml.add_attribute('classname', control[:title].nil? ? "#{profile_name}.Anonymous" : "#{profile_name}.#{control[:id]}")
+      result_xml.add_attribute('target', run_data[:platform][:target].nil? ? '' : run_data[:platform][:target].to_s)
+      result_xml.add_attribute('time', result[:run_time])
+
+      if result[:status] == 'failed'
+        failure_element = REXML::Element.new('failure')
+        failure_element.add_attribute('message', result[:message])
+        result_xml.add(failure_element)
+      elsif result[:status] == 'skipped'
+        result_xml.add_element('skipped')
+      end
+
+      result_xml
+    end
+
+    def count_profile_tests(profile)
+      profile[:controls].reduce(0) { |acc, elem|
+        acc + (elem[:results].nil? ? 0 : elem[:results].count)
+      }
+    end
+
+    def count_profile_failed_tests(profile)
+      profile[:controls].reduce(0) { |acc, elem|
+        if elem[:results].nil?
+          acc
+        else
+          acc + elem[:results].reduce(0) { |fail_test_total, test_case|
+            test_case[:status] == 'failed' ? fail_test_total + 1 : fail_test_total
+          }
+        end
+      }
+    end
+  end
+end

data/lib/inspec/require_loader.rb

@@ -0,0 +1,33 @@
+# encoding: utf-8
+# author: Dominik Richter
+# author: Christoph Hartmann
+
+module Inspec
+  class RequireLoader
+    Item = Struct.new(:content, :ref, :line, :loaded)
+
+    def initialize
+      @contents = {}
+    end
+
+    def add(path, content, ref, line)
+      @contents[path] = Item.new(content, ref, line, false)
+    end
+
+    def load(path)
+      c = @contents[path]
+      c.loaded = true
+      res = [c.content, c.ref, c.line || 1]
+      yield res if block_given?
+      res
+    end
+
+    def exists?(path)
+      @contents.key?(path)
+    end
+
+    def loaded?(path)
+      @contents[path].loaded == true
+    end
+  end
+end

data/lib/inspec/resource.rb

@@ -0,0 +1,190 @@
+# encoding: utf-8
+# copyright: 2015, Vulcano Security GmbH
+# author: Dominik Richter
+# author: Christoph Hartmann
+require 'inspec/plugins'
+
+module Inspec
+  class ProfileNotFound < StandardError; end
+
+  class Resource
+    def self.default_registry
+      @default_registry ||= {}
+    end
+
+    def self.registry
+      @registry ||= default_registry
+    end
+
+    def self.supports
+      @supports ||= {}
+    end
+
+    def self.new_registry
+      default_registry.dup
+    end
+
+    # Creates the inner DSL which includes all resources for
+    # creating tests. It is always connected to one target,
+    # which is specified via the backend argument.
+    #
+    # @param backend [BackendRunner] exposing the target to resources
+    # @return [ResourcesDSL]
+    def self.create_dsl(profile_context)
+      backend = profile_context.backend
+      my_registry = profile_context.resource_registry
+
+      Module.new do
+        define_method :resource_class do |profile_name, resource_name|
+          inner_context = if profile_name == profile_context.profile_id
+                            profile_context
+                          else
+                            profile_context.subcontext_by_name(profile_name)
+                          end
+
+          raise ProfileNotFound, "Cannot find profile named: #{profile_name}" if inner_context.nil?
+          inner_context.resource_registry[resource_name]
+        end
+
+        my_registry.each do |id, r|
+          define_method id.to_sym do |*args|
+            r.new(backend, id.to_s, *args)
+          end
+        end
+
+        define_method :inspec do
+          backend
+        end
+      end
+    end
+  end
+
+  # Retrieve the base class for creating a new resource.
+  # Create classes that inherit from this class.
+  #
+  # @param [int] version the resource version to use
+  # @return [Resource] base class for creating a new resource
+  def self.resource(version)
+    validate_resource_dsl_version!(version)
+    Inspec::Plugins::Resource
+  end
+
+  def self.validate_resource_dsl_version!(version)
+    raise 'Only resource version 1 is supported!' if version != 1
+  end
+end
+
+# Many resources use FilterTable.
+require 'utils/filter'
+
+# AWS resources are included via their own file.
+require 'resource_support/aws' if Gem.loaded_specs.key?('aws-sdk')
+
+if Gem.loaded_specs.key?('azure_mgmt_resources')
+  require 'resources/azure/azure_backend.rb'
+  require 'resources/azure/azure_generic_resource.rb'
+  require 'resources/azure/azure_resource_group.rb'
+  require 'resources/azure/azure_virtual_machine.rb'
+  require 'resources/azure/azure_virtual_machine_data_disk.rb'
+end
+
+require 'resources/aide_conf'
+require 'resources/apache'
+require 'resources/apache_conf'
+require 'resources/apt'
+require 'resources/audit_policy'
+require 'resources/auditd'
+require 'resources/auditd_conf'
+require 'resources/bash'
+require 'resources/bond'
+require 'resources/bridge'
+require 'resources/chocolatey_package'
+require 'resources/command'
+require 'resources/cran'
+require 'resources/cpan'
+require 'resources/crontab'
+require 'resources/dh_params'
+require 'resources/directory'
+require 'resources/docker'
+require 'resources/docker_container'
+require 'resources/docker_image'
+require 'resources/docker_service'
+require 'resources/elasticsearch'
+require 'resources/etc_fstab'
+require 'resources/etc_group'
+require 'resources/etc_hosts_allow_deny'
+require 'resources/etc_hosts'
+require 'resources/file'
+require 'resources/filesystem'
+require 'resources/firewalld'
+require 'resources/gem'
+require 'resources/groups'
+require 'resources/grub_conf'
+require 'resources/host'
+require 'resources/http'
+require 'resources/iis_app'
+require 'resources/iis_site'
+require 'resources/inetd_conf'
+require 'resources/interface'
+require 'resources/iptables'
+require 'resources/json'
+require 'resources/kernel_module'
+require 'resources/kernel_parameter'
+require 'resources/key_rsa'
+require 'resources/limits_conf'
+require 'resources/login_def'
+require 'resources/mount'
+require 'resources/mssql_session'
+require 'resources/mysql'
+require 'resources/mysql_conf'
+require 'resources/mysql_session'
+require 'resources/nginx'
+require 'resources/nginx_conf'
+require 'resources/npm'
+require 'resources/ntp_conf'
+require 'resources/oneget'
+require 'resources/oracledb_session'
+require 'resources/os'
+require 'resources/os_env'
+require 'resources/package'
+require 'resources/packages'
+require 'resources/parse_config'
+require 'resources/passwd'
+require 'resources/pip'
+require 'resources/platform'
+require 'resources/port'
+require 'resources/postgres'
+require 'resources/postgres_conf'
+require 'resources/postgres_hba_conf'
+require 'resources/postgres_ident_conf'
+require 'resources/postgres_session'
+require 'resources/powershell'
+require 'resources/processes'
+require 'resources/rabbitmq_conf'
+require 'resources/registry_key'
+require 'resources/security_policy'
+require 'resources/service'
+require 'resources/shadow'
+require 'resources/ssh_conf'
+require 'resources/ssl'
+require 'resources/sys_info'
+require 'resources/toml'
+require 'resources/users'
+require 'resources/vbscript'
+require 'resources/virtualization'
+require 'resources/windows_feature'
+require 'resources/windows_hotfix'
+require 'resources/windows_task'
+require 'resources/wmi'
+require 'resources/x509_certificate'
+require 'resources/xinetd'
+require 'resources/yum'
+require 'resources/zfs_dataset'
+require 'resources/zfs_pool'
+
+# file formats, depend on json implementation
+require 'resources/json'
+require 'resources/yaml'
+require 'resources/csv'
+require 'resources/ini'
+require 'resources/xml'