inspec-core 2.2.55 → 2.2.61

Sign up to get free protection for your applications and to get access to all the features.
Files changed (115) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +24 -8
  3. data/docs/resources/aide_conf.md.erb +10 -0
  4. data/docs/resources/apache.md.erb +10 -0
  5. data/docs/resources/apache_conf.md.erb +10 -0
  6. data/docs/resources/apt.md.erb +10 -0
  7. data/docs/resources/audit_policy.md.erb +10 -0
  8. data/docs/resources/auditd.md.erb +10 -0
  9. data/docs/resources/auditd_conf.md.erb +10 -0
  10. data/docs/resources/bash.md.erb +10 -0
  11. data/docs/resources/bond.md.erb +10 -0
  12. data/docs/resources/bridge.md.erb +10 -0
  13. data/docs/resources/bsd_service.md.erb +10 -0
  14. data/docs/resources/chocolatey_package.md.erb +10 -0
  15. data/docs/resources/command.md.erb +10 -0
  16. data/docs/resources/cpan.md.erb +10 -0
  17. data/docs/resources/cran.md.erb +10 -0
  18. data/docs/resources/crontab.md.erb +10 -0
  19. data/docs/resources/csv.md.erb +10 -0
  20. data/docs/resources/dh_params.md.erb +10 -0
  21. data/docs/resources/directory.md.erb +10 -0
  22. data/docs/resources/docker.md.erb +21 -0
  23. data/docs/resources/docker_container.md.erb +10 -0
  24. data/docs/resources/docker_image.md.erb +10 -0
  25. data/docs/resources/docker_plugin.md.erb +80 -0
  26. data/docs/resources/docker_service.md.erb +10 -0
  27. data/docs/resources/elasticsearch.md.erb +10 -0
  28. data/docs/resources/etc_fstab.md.erb +10 -0
  29. data/docs/resources/etc_group.md.erb +10 -0
  30. data/docs/resources/etc_hosts.md.erb +10 -0
  31. data/docs/resources/etc_hosts_allow.md.erb +10 -0
  32. data/docs/resources/etc_hosts_deny.md.erb +10 -0
  33. data/docs/resources/file.md.erb +10 -0
  34. data/docs/resources/filesystem.md.erb +10 -0
  35. data/docs/resources/firewalld.md.erb +10 -0
  36. data/docs/resources/gem.md.erb +10 -0
  37. data/docs/resources/group.md.erb +10 -0
  38. data/docs/resources/grub_conf.md.erb +10 -0
  39. data/docs/resources/host.md.erb +10 -0
  40. data/docs/resources/http.md.erb +10 -0
  41. data/docs/resources/iis_app.md.erb +10 -0
  42. data/docs/resources/iis_site.md.erb +10 -0
  43. data/docs/resources/inetd_conf.md.erb +10 -0
  44. data/docs/resources/ini.md.erb +10 -0
  45. data/docs/resources/interface.md.erb +10 -0
  46. data/docs/resources/iptables.md.erb +10 -0
  47. data/docs/resources/json.md.erb +10 -0
  48. data/docs/resources/kernel_module.md.erb +10 -0
  49. data/docs/resources/kernel_parameter.md.erb +10 -0
  50. data/docs/resources/key_rsa.md.erb +10 -0
  51. data/docs/resources/launchd_service.md.erb +10 -0
  52. data/docs/resources/limits_conf.md.erb +10 -0
  53. data/docs/resources/login_defs.md.erb +10 -0
  54. data/docs/resources/mount.md.erb +10 -0
  55. data/docs/resources/mssql_session.md.erb +10 -0
  56. data/docs/resources/mysql_conf.md.erb +10 -0
  57. data/docs/resources/mysql_session.md.erb +10 -0
  58. data/docs/resources/nginx.md.erb +10 -0
  59. data/docs/resources/nginx_conf.md.erb +10 -0
  60. data/docs/resources/npm.md.erb +10 -0
  61. data/docs/resources/ntp_conf.md.erb +10 -0
  62. data/docs/resources/oneget.md.erb +10 -0
  63. data/docs/resources/oracledb_session.md.erb +10 -0
  64. data/docs/resources/os.md.erb +10 -0
  65. data/docs/resources/os_env.md.erb +10 -0
  66. data/docs/resources/package.md.erb +10 -0
  67. data/docs/resources/packages.md.erb +10 -0
  68. data/docs/resources/parse_config.md.erb +10 -0
  69. data/docs/resources/parse_config_file.md.erb +10 -0
  70. data/docs/resources/passwd.md.erb +10 -0
  71. data/docs/resources/pip.md.erb +10 -0
  72. data/docs/resources/port.md.erb +10 -0
  73. data/docs/resources/postgres_conf.md.erb +10 -0
  74. data/docs/resources/postgres_hba_conf.md.erb +10 -0
  75. data/docs/resources/postgres_ident_conf.md.erb +10 -0
  76. data/docs/resources/postgres_session.md.erb +10 -0
  77. data/docs/resources/powershell.md.erb +10 -0
  78. data/docs/resources/processes.md.erb +10 -0
  79. data/docs/resources/rabbitmq_config.md.erb +10 -0
  80. data/docs/resources/registry_key.md.erb +38 -2
  81. data/docs/resources/runit_service.md.erb +10 -0
  82. data/docs/resources/security_policy.md.erb +10 -0
  83. data/docs/resources/service.md.erb +10 -0
  84. data/docs/resources/shadow.md.erb +10 -0
  85. data/docs/resources/ssh_config.md.erb +10 -0
  86. data/docs/resources/sshd_config.md.erb +10 -0
  87. data/docs/resources/ssl.md.erb +10 -0
  88. data/docs/resources/sys_info.md.erb +10 -0
  89. data/docs/resources/systemd_service.md.erb +10 -0
  90. data/docs/resources/sysv_service.md.erb +10 -0
  91. data/docs/resources/upstart_service.md.erb +10 -0
  92. data/docs/resources/user.md.erb +10 -0
  93. data/docs/resources/users.md.erb +10 -0
  94. data/docs/resources/vbscript.md.erb +10 -0
  95. data/docs/resources/virtualization.md.erb +10 -0
  96. data/docs/resources/windows_feature.md.erb +10 -0
  97. data/docs/resources/windows_hotfix.md.erb +10 -0
  98. data/docs/resources/windows_task.md.erb +10 -0
  99. data/docs/resources/wmi.md.erb +10 -0
  100. data/docs/resources/x509_certificate.md.erb +10 -0
  101. data/docs/resources/xinetd_conf.md.erb +10 -0
  102. data/docs/resources/xml.md.erb +10 -0
  103. data/docs/resources/yaml.md.erb +10 -0
  104. data/docs/resources/yum.md.erb +10 -0
  105. data/docs/resources/zfs_dataset.md.erb +10 -0
  106. data/docs/resources/zfs_pool.md.erb +10 -0
  107. data/lib/inspec/base_cli.rb +2 -2
  108. data/lib/inspec/cli.rb +3 -2
  109. data/lib/inspec/resource.rb +2 -0
  110. data/lib/inspec/runner.rb +2 -4
  111. data/lib/inspec/version.rb +1 -1
  112. data/lib/resources/docker.rb +34 -0
  113. data/lib/resources/docker_plugin.rb +63 -0
  114. data/lib/resources/iis_app_pool.rb +116 -0
  115. metadata +5 -2
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 886615c61697bb4428e1a496b349a0ac39a1732142f66cc741d3e6c7339b649f
4
- data.tar.gz: eb06d665de5738d4cab5719b91e745fc525935af52b3c1023c559ed62d45f063
3
+ metadata.gz: 60f58f226ef840fc6d018efdb8189a0f64ea59c3a6fe70014cbfec29ed281be4
4
+ data.tar.gz: 645469e196bec0f8bd509ca0c43766b8febf6468937f8faa9d7cc0602cd2c11e
5
5
  SHA512:
6
- metadata.gz: 835a4b160e5d33ec1ac6bf2ff31ab895b3c6d1f8837458bb631b8abfaa1b741cb14f6e5688b6c211b152c83efc87c633e3a88d13eb75eb99892bfc61aa1cad80
7
- data.tar.gz: cbd8f787e418ac09fac7b36312e979c5fedda71aaf1254bd59be2fb5ff091d3168b393a38b2e0ae22215926eff431fbf283c961beeff25e6395685ec55c75344
6
+ metadata.gz: 8c34594bbd90b23332d45032c4d9b1c5af6cf3aa39cd59fb2b5182de7ed9776252b9074a74673d2c50f4e430e391ae9b8195dd1ecc01d876fa840395f288fc7a
7
+ data.tar.gz: 3757160f6087026aeb23a10c7e7daf8ee1930e53045cc01de5413506e11d4d865c034e5a6c4fc1d5e36964e6df9d7bcbc86125515f26f32939615f7a02e593ce
data/CHANGELOG.md CHANGED
@@ -1,20 +1,37 @@
1
1
  # Change Log
2
2
  <!-- usage documentation: http://expeditor-docs.es.chef.io/configuration/changelog/ -->
3
- <!-- latest_release 2.2.55 -->
4
- ## [v2.2.55](https://github.com/inspec/inspec/tree/v2.2.55) (2018-08-03)
3
+ <!-- latest_release 2.2.61 -->
4
+ ## [v2.2.61](https://github.com/inspec/inspec/tree/v2.2.61) (2018-08-09)
5
5
 
6
- #### Enhancements
7
- - Add a merged json report for A2 [#3261](https://github.com/inspec/inspec/pull/3261) ([jquick](https://github.com/jquick))
6
+ #### New Resources
7
+ - add iis_app_pool resource [#2400](https://github.com/inspec/inspec/pull/2400) ([strocknar](https://github.com/strocknar))
8
8
  <!-- latest_release -->
9
9
 
10
- <!-- release_rollup since=2.2.54 -->
11
- ### Changes since 2.2.54 release
10
+ <!-- release_rollup since=2.2.55 -->
11
+ ### Changes since 2.2.55 release
12
+
13
+ #### New Resources
14
+ - add iis_app_pool resource [#2400](https://github.com/inspec/inspec/pull/2400) ([strocknar](https://github.com/strocknar)) <!-- 2.2.61 -->
15
+ - Add new resource: aws_ecs_cluster [#3213](https://github.com/inspec/inspec/pull/3213) ([meringu](https://github.com/meringu)) <!-- 2.2.60 -->
12
16
 
13
17
  #### Enhancements
14
- - Add a merged json report for A2 [#3261](https://github.com/inspec/inspec/pull/3261) ([jquick](https://github.com/jquick)) <!-- 2.2.55 -->
18
+ - Adding docker plugin support [#3074](https://github.com/inspec/inspec/pull/3074) ([frezbo](https://github.com/frezbo)) <!-- 2.2.58 -->
19
+
20
+ #### Bug Fixes
21
+ - Error cleanly if a reporter errors while rendering [#3280](https://github.com/inspec/inspec/pull/3280) ([jquick](https://github.com/jquick)) <!-- 2.2.59 -->
22
+ - Add support in aws_route_table to allow 17 hexadecimal characters [#3277](https://github.com/inspec/inspec/pull/3277) ([kchistova](https://github.com/kchistova)) <!-- 2.2.57 -->
23
+
24
+ #### Merged Pull Requests
25
+ - Enable inspec archive, check, and json to run as unpriveleged user [#3263](https://github.com/inspec/inspec/pull/3263) ([phiggins](https://github.com/phiggins)) <!-- 2.2.56 -->
15
26
  <!-- release_rollup -->
16
27
 
17
28
  <!-- latest_stable_release -->
29
+ ## [v2.2.55](https://github.com/inspec/inspec/tree/v2.2.55) (2018-08-03)
30
+
31
+ #### Enhancements
32
+ - Add a merged json report for A2 [#3261](https://github.com/inspec/inspec/pull/3261) ([jquick](https://github.com/jquick))
33
+ <!-- latest_stable_release -->
34
+
18
35
  ## [v2.2.54](https://github.com/inspec/inspec/tree/v2.2.54) (2018-08-02)
19
36
 
20
37
  #### Enhancements
@@ -24,7 +41,6 @@
24
41
 
25
42
  #### Merged Pull Requests
26
43
  - Ability to render contrib resource pack docs on main website [#3184](https://github.com/inspec/inspec/pull/3184) ([clintoncwolfe](https://github.com/clintoncwolfe))
27
- <!-- latest_stable_release -->
28
44
 
29
45
  ## [v2.2.50](https://github.com/inspec/inspec/tree/v2.2.50) (2018-07-26)
30
46
 
@@ -9,6 +9,16 @@ Use the `aide_conf` InSpec audit resource to test the rules established for the
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.37.6 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `aide_conf` resource block can be used to determine if the selection lines contain one (or more) directories whose files should be added to the aide database:
@@ -11,6 +11,16 @@ Use the `apache` InSpec audit resource to test the state of the Apache server on
11
11
 
12
12
  <br>
13
13
 
14
+ ## Availability
15
+
16
+ ### Installation
17
+
18
+ This resource is distributed along with InSpec itself. You can use it automatically.
19
+
20
+ ### Version
21
+
22
+ This resource first became available in v1.51.15 of InSpec.
23
+
14
24
  ## Syntax
15
25
 
16
26
  An `apache` InSpec audit resource block declares settings that should be tested:
@@ -9,6 +9,16 @@ Use the `apache_conf` InSpec audit resource to test the configuration settings f
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `apache_conf` InSpec audit resource block declares configuration settings that should be tested:
@@ -9,6 +9,16 @@ Use the `apt` InSpec audit resource to verify Apt repositories on the Debian and
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `apt` resource block tests the contents of Apt and PPA repositories:
@@ -9,6 +9,16 @@ Use the `audit_policy` InSpec audit resource to test auditing policies on the Wi
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `audit_policy` resource block declares a parameter that belongs to an audit policy category or subcategory:
@@ -9,6 +9,16 @@ Use the `auditd` InSpec audit resource to test the rules for logging that exist
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.38.8 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `auditd` resource block declares one (or more) rules to be tested, and then what that rule should do:
@@ -9,6 +9,16 @@ Use the `auditd_conf` InSpec audit resource to test the configuration settings f
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `auditd_conf` resource block declares configuration settings that should be tested:
@@ -9,6 +9,16 @@ Use the `bash` InSpec audit resource to test an arbitrary command that is run on
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `command` resource block declares a command to be run, one (or more) expected outputs, and the location to which that output is sent:
@@ -9,6 +9,16 @@ Use the `bond` InSpec audit resource to test a logical, bonded network interface
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `bond` resource block declares a bonded network interface, and then specifies the properties of that bonded network interface to be tested:
@@ -9,6 +9,16 @@ Use the `bridge` InSpec audit resource to test basic network bridge properties,
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `bridge` resource block declares the bridge to be tested and what interface it should be associated with:
@@ -9,6 +9,16 @@ Use the `bsd_service` InSpec audit resource to test a service using a Berkeley O
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `bsd_service` resource block declares the name of a service and then one (or more) matchers to test the state of the service:
@@ -9,6 +9,16 @@ Use the `chocolatey_package` InSpec audit resource to test if the named [Chocola
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v2.1.30 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `chocolatey_package` resource block declares the name of a Chocolatey package to be tested:
@@ -9,6 +9,16 @@ Use the `command` InSpec audit resource to test an arbitrary command that is run
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `command` resource block declares a command to be run, one (or more) expected values, and the location to which that output is sent:
@@ -9,6 +9,16 @@ Use the `cpan` InSpec audit resource to test Perl modules that are installed by
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.43.5 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `cpan` resource block declares a package and (optionally) a package version:
@@ -9,6 +9,16 @@ Use the `cran` InSpec audit resource to test R modules that are installed from C
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.43.5 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `cran` resource block declares a package and (optionally) a package version:
@@ -9,6 +9,16 @@ Use the `crontab` InSpec audit resource to test the crontab entries for a partic
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.15.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `crontab` resource block declares a user (which defaults to the current user, if not specified), and then the details to be tested, such as the schedule elements for each crontab entry or the commands itself:
@@ -9,6 +9,16 @@ Use the `csv` InSpec audit resource to test configuration data in a CSV file.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `csv` resource block declares the configuration data to be tested:
@@ -9,6 +9,16 @@ Use the `dh_params` InSpec audit resource to test Diffie-Hellman (DH) parameters
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.19.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `dh_params` resource block declares a parameter file to be tested.
@@ -9,6 +9,16 @@ Use the `directory` InSpec audit resource to test if the file type is a director
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `directory` resource block declares the location of the directory to be tested, and then one (or more) matchers.
@@ -9,6 +9,16 @@ Use the `docker` InSpec audit resource to test configuration data for the Docker
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.21.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `docker` resource block declares allows you to write test for many containers:
@@ -148,6 +158,17 @@ Or execute the profile directly via URL:
148
158
  its('sizes') { should_not include "1.41 GB" }
149
159
  end
150
160
 
161
+ ### plugins
162
+
163
+ `plugins` returns information about Docker plugins as returned by [docker plugin ls](https://docs.docker.com/engine/reference/commandline/plugin/).
164
+
165
+ describe docker.plugins do
166
+ its('names') { should include ["store/weaveworks/net-plugin", "docker4x/cloudstor"] }
167
+ its('ids') { should cmp ["6ea8176de74b", "771d3ee7c7ea"] }
168
+ its('versions') { should cmp ["2.3.0", "18.03.1-ce-aws1"] }
169
+ its('enabled') { should cmp [true, false] }
170
+ end
171
+
151
172
  ### info
152
173
 
153
174
  `info` returns the parsed result of [docker info](https://docs.docker.com/engine/reference/commandline/info/)
@@ -9,6 +9,16 @@ Use the `docker_container` InSpec audit resource to test a Docker container.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.21.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `docker_container` resource block declares the configuration data to be tested: