inspec-core 6.8.24 → 7.0.38.beta

data/lib/inspec/resources/ssh_key.rb

@@ -1,124 +0,0 @@
-require "inspec/utils/file_reader"
-require "net/ssh" unless defined?(Net::SSH)
-
-# Change module if required
-module Inspec::Resources
-  class SshKey < FileResource
-    # Every resource requires an internal name.
-    name "ssh_key"
-
-    # Restrict to only run on the below platforms (if none were given,
-    # all OS's and cloud API's supported)
-    supports platform: "unix"
-    supports platform: "windows"
-
-    desc "public/private SSH key pair test"
-
-    example <<~EXAMPLE
-      describe ssh_key('path: ~/.ssh/id_rsa') do
-        its('key_length') { should eq 4096 }
-        its('type') { should cmp /rsa/ }
-        it { should be_private }
-      end
-    EXAMPLE
-
-    include FileReader
-
-    def initialize(keypath, passphrase = nil)
-      skip_resource "The `ssh_key` resource is not yet available on your OS." unless inspec.os.unix? || inspec.os.windows?
-      @key_path = set_ssh_key_path(keypath)
-      @passphrase = passphrase
-      @key = read_ssh_key
-      super(@key_path)
-    end
-
-    def public?
-      return if @key.nil?
-
-      @key[:public]
-    end
-
-    def private?
-      return if @key.nil?
-
-      @key[:private]
-    end
-
-    def key_length
-      return if @key.nil?
-
-      @key[:key_length]
-    end
-
-    def type
-      return if @key.nil?
-
-      @key[:type]
-    end
-
-    # Define a resource ID. This is used in reporting engines to uniquely identify the individual resource.
-    # This might be a file path, or a process ID, or a cloud instance ID. Only meaningful to the implementation.
-    # Must be a string. Defaults to the empty string if not implemented.
-    def resource_id
-      @key_path || "SSH key"
-    end
-
-    def to_s
-      "ssh_key #{@key_path}"
-    end
-
-    private
-
-    def set_ssh_key_path(keypath)
-      if File.exist?(keypath)
-        @key_path = keypath
-      elsif File.exist?(File.join("#{Dir.home}/.ssh/", keypath))
-        @key_path = File.join("#{Dir.home}/.ssh/", keypath)
-      else
-        raise Inspec::Exceptions::ResourceSkipped, "Can't find file: #{keypath}"
-      end
-    end
-
-    def read_ssh_key
-      key_data = {}
-      key = nil
-      filecontent = read_file_content((@key_path), @passphrase)
-      raise Inspec::Exceptions::ResourceSkipped, "File is empty: #{@key_path}" if filecontent.split("\n").empty?
-
-      if filecontent.split("\n")[0].include?("PRIVATE")
-        # Net::SSH::KeyFactory does not have support to load private key for DSA
-        key = Net::SSH::KeyFactory.load_private_key(@key_path, @passphrase, false)
-        unless key.nil?
-          key_data[:private] = true
-          key_data[:public] = false
-          # The data send for ssh type is not in same format so it's good to match on the string
-          key_data[:type] = key.ssh_type
-          key_data[:key_length] = key_lengh(key)
-        end
-      else
-        key = Net::SSH::KeyFactory.load_public_key(@key_path)
-        unless key.nil?
-          key_data[:private] = false
-          key_data[:public] = true
-          # The data send for ssh type is not in same format so it's good to match on the string
-          key_data[:type] = key.ssh_type
-          key_data[:key_length] = key_lengh(key)
-        end
-      end
-
-      key_data
-    rescue OpenSSL::PKey::PKeyError => e
-      raise Inspec::Exceptions::ResourceFailed, "#{e.message}"
-    end
-
-    def key_lengh(key)
-      if key.class.to_s == "OpenSSL::PKey::RSA"
-        key.public_key.n.num_bits
-      else
-        # Unable to get the key lenght data for other types of keys
-        # TODO: Need to check if there is any method that will get this info.
-        nil
-      end
-    end
-  end
-end

data/lib/inspec/resources/sshd_active_config.rb

@@ -1,2 +0,0 @@
-# This is just here to make the dynamic loader happy.
-require "inspec/resources/ssh_config"

data/lib/inspec/resources/sshd_config.rb

@@ -1,2 +0,0 @@
-# This is just here to make the dynamic loader happy.
-require "inspec/resources/ssh_config"

data/lib/inspec/resources/sybase_conf.rb

@@ -1,41 +0,0 @@
-require "inspec/resources/sybase_session"
-
-module Inspec::Resources
-  class SybaseConf < Inspec.resource(1)
-    name "sybase_conf"
-    supports platform: "unix"
-    # supports platform: "windows" # TODO
-    desc "Use the sybase_conf InSpec resource to test Sybase config settings"
-    example <<~EXAMPLE
-      describe sybase_conf("max memory", password: 'password', server: 'SYBASE') do
-        its("run_value") { should cmp 180224 }
-      end
-    EXAMPLE
-
-    attr_reader :conf_param, :sql_query
-    def initialize(conf_param_name, opts = {})
-      @conf_param = conf_param_name
-      opts[:username] ||= "sa"
-      opts[:database] ||= "master"
-      sql_session = inspec.sybase_session(opts)
-      @sql_query = sql_session.query("sp_configure \"#{conf_param}\"")
-    end
-
-    def run_value
-      sql_query.row(0).column("Run Value").value
-    end
-
-    def config_value
-      sql_query.row(0).column("Config Value").value
-    end
-
-    def resource_id
-      conf_param || "Sybase config settings"
-    end
-
-    def to_s
-      "Sybase Conf #{conf_param}"
-    end
-
-  end
-end

data/lib/inspec/resources/sybase_session.rb

@@ -1,124 +0,0 @@
-require "inspec/resources/command"
-require "inspec/utils/database_helpers"
-require "hashie/mash"
-require "csv" unless defined?(CSV)
-require "tempfile" unless defined?(Tempfile)
-
-module Inspec::Resources
-  # STABILITY: Experimental
-  # This resource needs further testing and refinement
-  #
-  class SybaseSession < Inspec.resource(1)
-    name "sybase_session"
-    supports platform: "unix"
-    # supports platform: "windows" # TODO
-    desc "Use the sybase_session InSpec resource to test commands against an Sybase database"
-    example <<~EXAMPLE
-      sql = sybase_session(username: 'my_user', password: 'password', server: 'SYBASE', database: 'pubs2')
-      describe sql.query(\"SELECT * FROM authors\").row(0).column('au_lname') do
-        its('value') { should eq 'Smith' }
-      end
-    EXAMPLE
-
-    # TODO: allow to set -I interfaces file
-    # TODO: allow to customize -s column separator
-    attr_reader :bin, :col_sep, :database, :password, :server, :sybase_home, :username
-
-    def initialize(opts = {})
-      @username = opts[:username]
-      @password = opts[:password]
-      @database = opts[:database]
-      @server = opts[:server]
-      @sybase_home = opts[:sybase_home] || "/opt/sap"
-      @bin = opts[:bin] || "isql"
-      @col_sep = "|"
-
-      fail_resource "Can't run Sybase checks without authentication" unless username && password
-      fail_resource "You must provide a server name for the session" unless server
-      fail_resource "You must provide a database name for the session" unless database
-      fail_resource "Cannot find #{bin} CLI tool" unless inspec.command(bin).exist?
-    end
-
-    def query(sql)
-      # We must write the SQl to a temp file on the remote target
-      # try to get a temp path
-      sql_file_path = upload_sql_file(sql)
-
-      # TODO: Find if there is better way to get the current shell
-      current_shell = inspec.command("echo $SHELL")
-
-      res = current_shell.exit_status
-
-      # isql reuires that we have a matching locale set, but does not support C.UTF-8. en_US.UTF-8 is the least evil.
-      if res == 0 && ( current_shell.stdout&.include?("/csh") || current_shell.stdout&.include?("/tcsh") )
-        command = "source #{sybase_home}/SYBASE.csh; setenv LANG en_US.UTF-8; #{bin} -s\"#{col_sep}\" -w80000 -S #{server} -U #{username} -D #{database} -P \"#{password}\" < #{sql_file_path}"
-      else
-        command = "LANG=en_US.UTF-8 SYBASE=#{sybase_home} #{bin} -s\"#{col_sep}\" -w80000 -S #{server} -U #{username} -D #{database} -P \"#{password}\" < #{sql_file_path}"
-      end
-
-      isql_cmd = inspec.command(command)
-      # Check for isql errors
-      res = isql_cmd.exit_status
-      raise Inspec::Exceptions::ResourceFailed.new("isql exited with code #{res} and stderr '#{isql_cmd.stderr}', stdout '#{isql_cmd.stdout}'") unless res == 0
-      # isql is ill-behaved, and returns 0 on error
-      raise Inspec::Exceptions::ResourceFailed.new("isql exited with error '#{isql_cmd.stderr}', stdout '#{isql_cmd.stdout}'") unless isql_cmd.stderr == ""
-      # check stdout for error messages when stderr is empty "Msg 102, Level 15, State 181:\nServer 'SYBASE', Line 1:\nIncorrect syntax near '.'.\n"
-      raise Inspec::Exceptions::ResourceFailed.new("isql exited with error #{isql_cmd.stdout}") if isql_cmd.stdout.match?(/Msg\s\d+,\sLevel\s\d+,\sState\s\d+/)
-
-      # Clean up temporary file
-      rm_cmd = inspec.command("rm #{sql_file_path}")
-      res = rm_cmd.exit_status # TODO: handle
-      raise Inspec::Exceptions::ResourceFailed.new("Unable to delete temproary SQL input file at #{sql_file_path}: #{rm_cmd.stderr}") unless res == 0
-
-      DatabaseHelper::SQLQueryResult.new(isql_cmd, parse_csv_result(isql_cmd.stdout))
-    end
-
-    def resource_id
-      @database || "Sybase Session"
-    end
-
-    def to_s
-      "Sybase Session"
-    end
-
-    private
-
-    def parse_csv_result(stdout)
-      output = stdout.gsub(/\r/, "").strip
-      lines = output.lines
-      # Remove second row (all dashes) and last 2 rows (blank and summary lines)
-      trimmed_output = ([lines[0]] << lines.slice(2..-3)).join("")
-      header_converter = Proc.new do |header|
-        # This is here to suppress a warning from Hashie::Mash when it encounters a
-        # header column that ends up with the name "default", which happens when using the
-        # sybase_conf resource. It does mean that aly query whose output field includes the name
-        # Default (exactly) will get renamed to default_value, but that seems unlikely.
-        if header.match?(/^Default\s+$/)
-          "default_value"
-        else
-          header.downcase.strip
-        end
-      end
-      field_converter = ->(field) { field&.strip }
-      CSV.parse(trimmed_output, headers: true, header_converters: header_converter, converters: field_converter, col_sep: col_sep).map { |row| Hashie::Mash.new(row.to_h) }
-    end
-
-    def upload_sql_file(sql)
-      remote_temp_dir = "/tmp"
-      remote_file_path = nil
-      local_temp_file = Tempfile.new(["sybase", ".sql"])
-      begin
-        local_temp_file.write("#{sql}\n")
-        local_temp_file.write("go\n")
-        local_temp_file.flush
-        filename = File.basename(local_temp_file.path)
-        remote_file_path = "#{remote_temp_dir}/#{filename}"
-        inspec.backend.upload([local_temp_file.path], remote_temp_dir)
-      ensure
-        local_temp_file.close
-        local_temp_file.unlink
-      end
-      remote_file_path
-    end
-  end
-end

data/lib/inspec/utils/deprecated_core_resources_list.rb

@@ -1,25 +0,0 @@
-module DeprecatedCoreResourcesList
-  CORE_RESOURCES_DEPRECATED = %i{
-    docker_container
-    docker_image
-    docker_plugin
-    docker_service
-    elasticsearch
-    ibmdb2_conf
-    ibmdb2_session
-    mongodb
-    mongodb_conf
-    mongodb_session
-    podman
-    podman_container
-    podman_image
-    podman_network
-    podman_pod
-    podman_volume
-    rabbitmq_config
-    ssh_config
-    ssh_key
-    sybase_conf
-    sybase_session
-  }.freeze
-end

data/lib/inspec/utils/podman.rb

@@ -1,24 +0,0 @@
-require "inspec/resources/command"
-
-module Inspec
-  module Utils
-    module Podman
-      def podman_running?
-        inspec.command("podman version").exit_status == 0
-      end
-
-      # Generates the template in this format using labels hash: "\"id\": {{json .ID}}, \"name\": {{json .Name}}",
-      def generate_go_template(labels)
-        (labels.map { |k, v| "\"#{k}\": {{json .#{v}}}" }).join(", ")
-      end
-
-      def parse_command_output(output)
-        require "json" unless defined?(JSON)
-        JSON.parse(output)
-      rescue JSON::ParserError => _e
-        warn "Could not parse the command output"
-        {}
-      end
-    end
-  end
-end