inspec 0.34.1 → 1.0.0

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: inspec
 version: !ruby/object:Gem::Version
-  version: 0.34.1
+  version: 1.0.0
 platform: ruby
 authors:
 - Dominik Richter
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-09-13 00:00:00.000000000 Z
+date: 2016-09-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: train
@@ -16,7 +16,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.19.0
+        version: 0.19.1
     - - "<"
       - !ruby/object:Gem::Version
         version: '1.0'
@@ -26,7 +26,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.19.0
+        version: 0.19.1
     - - "<"
       - !ruby/object:Gem::Version
         version: '1.0'
@@ -224,17 +224,89 @@ files:
 - README.md
 - Rakefile
 - bin/inspec
-- docs/cli.rst
-- docs/dsl_inspec.rst
-- docs/dsl_resource.rst
-- docs/inspec_and_friends.rst
-- docs/matchers.rst
-- docs/profiles.rst
-- docs/readme.rst
-- docs/resources.rst
-- docs/ruby_usage.rst
-- docs/shell.rst
-- docs/template.rst
+- docs/.gitignore
+- docs/README.md
+- docs/cli.md
+- docs/dsl_inspec.md
+- docs/dsl_resource.md
+- docs/inspec_and_friends.md
+- docs/matchers.md
+- docs/plugin_kitchen_inspec.html.md
+- docs/profiles.md
+- docs/resources/apache_conf.md.erb
+- docs/resources/apt.md.erb
+- docs/resources/audit_policy.md.erb
+- docs/resources/auditd_conf.md.erb
+- docs/resources/auditd_rules.md.erb
+- docs/resources/bash.md.erb
+- docs/resources/bond.md.erb
+- docs/resources/bridge.md.erb
+- docs/resources/bsd_service.md.erb
+- docs/resources/command.md.erb
+- docs/resources/csv.md.erb
+- docs/resources/directory.md.erb
+- docs/resources/etc_group.md.erb
+- docs/resources/etc_passwd.md.erb
+- docs/resources/etc_shadow.md.erb
+- docs/resources/file.md.erb
+- docs/resources/gem.md.erb
+- docs/resources/group.md.erb
+- docs/resources/grub_conf.md.erb
+- docs/resources/host.md.erb
+- docs/resources/iis_site.md.erb
+- docs/resources/inetd_conf.md.erb
+- docs/resources/ini.md.erb
+- docs/resources/interface.md.erb
+- docs/resources/iptables.md.erb
+- docs/resources/json.md.erb
+- docs/resources/kernel_module.md.erb
+- docs/resources/kernel_parameter.md.erb
+- docs/resources/launchd_service.md.erb
+- docs/resources/limits_conf.md.erb
+- docs/resources/login_def.md.erb
+- docs/resources/mount.md.erb
+- docs/resources/mysql_conf.md.erb
+- docs/resources/mysql_session.md.erb
+- docs/resources/npm.md.erb
+- docs/resources/ntp_conf.md.erb
+- docs/resources/oneget.md.erb
+- docs/resources/os.md.erb
+- docs/resources/os_env.md.erb
+- docs/resources/package.md.erb
+- docs/resources/parse_config.md.erb
+- docs/resources/parse_config_file.md.erb
+- docs/resources/pip.md.erb
+- docs/resources/port.md.erb
+- docs/resources/postgres_conf.md.erb
+- docs/resources/postgres_session.md.erb
+- docs/resources/powershell.md.erb
+- docs/resources/process.md.erb
+- docs/resources/registry_key.md.erb
+- docs/resources/runit_service.md.erb
+- docs/resources/security_policy.md.erb
+- docs/resources/service.md.erb
+- docs/resources/ssh_config.md.erb
+- docs/resources/sshd_config.md.erb
+- docs/resources/ssl.md.erb
+- docs/resources/sys_info.md.erb
+- docs/resources/systemd_service.md.erb
+- docs/resources/sysv_service.md.erb
+- docs/resources/upstart_service.md.erb
+- docs/resources/user.md.erb
+- docs/resources/users.md.erb
+- docs/resources/vbscript.md.erb
+- docs/resources/windows_feature.md.erb
+- docs/resources/wmi.md.erb
+- docs/resources/xinetd_conf.md.erb
+- docs/resources/yaml.md.erb
+- docs/resources/yum.md.erb
+- docs/ruby_usage.md
+- docs/shared/matcher_be.md.erb
+- docs/shared/matcher_cmp.md.erb
+- docs/shared/matcher_eq.md.erb
+- docs/shared/matcher_include.md.erb
+- docs/shared/matcher_match.md.erb
+- docs/shell.md
 - examples/README.md
 - examples/inheritance/README.md
 - examples/inheritance/controls/example.rb
@@ -309,15 +381,16 @@ files:
 - lib/inspec/archive/zip.rb
 - lib/inspec/backend.rb
 - lib/inspec/base_cli.rb
+- lib/inspec/cached_fetcher.rb
 - lib/inspec/cli.rb
 - lib/inspec/completions/bash.sh.erb
 - lib/inspec/completions/zsh.sh.erb
 - lib/inspec/control_eval_context.rb
+- lib/inspec/dependencies/cache.rb
 - lib/inspec/dependencies/dependency_set.rb
 - lib/inspec/dependencies/lockfile.rb
 - lib/inspec/dependencies/requirement.rb
 - lib/inspec/dependencies/resolver.rb
-- lib/inspec/dependencies/vendor_index.rb
 - lib/inspec/describe.rb
 - lib/inspec/dsl.rb
 - lib/inspec/dsl_shared.rb
@@ -376,7 +449,7 @@ files:
 - lib/resources/etc_group.rb
 - lib/resources/file.rb
 - lib/resources/gem.rb
-- lib/resources/group.rb
+- lib/resources/groups.rb
 - lib/resources/grub_conf.rb
 - lib/resources/host.rb
 - lib/resources/iis_site.rb
@@ -462,3 +535,4 @@ signing_key:
 specification_version: 4
 summary: Infrastructure and compliance testing.
 test_files: []
+has_rdoc: 

data/docs/cli.rst

@@ -1,442 +0,0 @@
-=====================================================
-InSpec CLI
-=====================================================
-
-Use the InSpec CLI to run tests and audits against targets using local, SSH, WinRM, or Docker connections.
-
-archive
-=====================================================
-
-Archive a profile to tar.gz (default) or zip
-
-Syntax
------------------------------------------------------
-
-This subcommand has the following syntax:
-
-.. code-block:: bash
-
-   $ inspec archive PATH
-
-Options
------------------------------------------------------
-
-This subcommand has additional options:
-
-``--ignore-errors``, ``--no-ignore-errors``
-   Ignore profile warnings.
-
-``-o``, ``--output=OUTPUT``
-   Save the archive to a path
-
-``--overwrite``, ``--no-overwrite``
-   Overwrite existing archive.
-
-``--profiles-path=PROFILES_PATH``
-   Folder which contains referenced profiles.
-
-``--tar``, ``--no-tar``
-   Generates a tar.gz archive.
-
-``--zip``, ``--no-zip``
-   Generates a zip archive.
-
-
-
-check
-=====================================================
-
-Verify all tests at the specified path
-
-Syntax
------------------------------------------------------
-
-This subcommand has the following syntax:
-
-.. code-block:: bash
-
-   $ inspec check PATH
-
-Options
------------------------------------------------------
-
-This subcommand has additional options:
-
-``--format=FORMAT``
-   
-
-``--profiles-path=PROFILES_PATH``
-   Folder which contains referenced profiles.
-
-
-
-compliance
-=====================================================
-
-Chef compliance commands
-
-Syntax
------------------------------------------------------
-
-This subcommand has the following syntax:
-
-.. code-block:: bash
-
-   $ inspec compliance SUBCOMMAND ...
-
-
-
-detect
-=====================================================
-
-Detect the target os
-
-Syntax
------------------------------------------------------
-
-This subcommand has the following syntax:
-
-.. code-block:: bash
-
-   $ inspec detect
-
-Options
------------------------------------------------------
-
-This subcommand has additional options:
-
-``-b``, ``--backend=BACKEND``
-   Choose a backend: local, ssh, winrm, docker.
-
-``--format=FORMAT``
-   
-
-``--host=HOST``
-   Specify a remote host which is tested.
-
-``--json-config=JSON_CONFIG``
-   Read configuration from JSON file (`-` reads from stdin).
-
-``-i``, ``--key-files=one two three``
-   Login key or certificate file for a remote scan.
-
-``-l``, ``--log-level=LOG_LEVEL``
-   Set the log level: info (default), debug, warn, error
-
-``--password=PASSWORD``
-   Login password for a remote scan, if required.
-
-``--path=PATH``
-   Login path to use when connecting to the target (WinRM).
-
-``-p``, ``--port=N``
-   Specify the login port for a remote scan.
-
-``--self-signed``, ``--no-self-signed``
-   Allow remote scans with self-signed certificates (WinRM).
-
-``--ssl``, ``--no-ssl``
-   Use SSL for transport layer encryption (WinRM).
-
-``--sudo``, ``--no-sudo``
-   Run scans with sudo. Only activates on Unix and non-root user.
-
-``--sudo-command=SUDO_COMMAND``
-   Alternate command for sudo.
-
-``--sudo-options=SUDO_OPTIONS``
-   Additional sudo options for a remote scan.
-
-``--sudo-password=SUDO_PASSWORD``
-   Specify a sudo password, if it is required.
-
-``-t``, ``--target=TARGET``
-   Simple targeting option using URIs, e.g. ssh://user:pass@host:port
-
-``--user=USER``
-   The login user for a remote scan.
-
-
-
-env
-=====================================================
-
-Output shell-appropriate completion configuration
-
-Syntax
------------------------------------------------------
-
-This subcommand has the following syntax:
-
-.. code-block:: bash
-
-   $ inspec env
-
-
-
-exec
-=====================================================
-
-Run all test files at the specified path.
-
-Syntax
------------------------------------------------------
-
-This subcommand has the following syntax:
-
-.. code-block:: bash
-
-   $ inspec exec PATHS
-
-Options
------------------------------------------------------
-
-This subcommand has additional options:
-
-``--attrs=one two three``
-   Load attributes file (experimental)
-
-``-b``, ``--backend=BACKEND``
-   Choose a backend: local, ssh, winrm, docker.
-
-``--color``, ``--no-color``
-   Use colors in output.
-
-``--controls=one two three``
-   A list of controls to run. Ignore all other tests.
-
-``--format=FORMAT``
-   Which formatter to use: cli, progress, documentation, json, json-min
-
-``--host=HOST``
-   Specify a remote host which is tested.
-
-``--json-config=JSON_CONFIG``
-   Read configuration from JSON file (`-` reads from stdin).
-
-``-i``, ``--key-files=one two three``
-   Login key or certificate file for a remote scan.
-
-``-l``, ``--log-level=LOG_LEVEL``
-   Set the log level: info (default), debug, warn, error
-
-``--password=PASSWORD``
-   Login password for a remote scan, if required.
-
-``--path=PATH``
-   Login path to use when connecting to the target (WinRM).
-
-``-p``, ``--port=N``
-   Specify the login port for a remote scan.
-
-``--profiles-path=PROFILES_PATH``
-   Folder which contains referenced profiles.
-
-``--self-signed``, ``--no-self-signed``
-   Allow remote scans with self-signed certificates (WinRM).
-
-``--ssl``, ``--no-ssl``
-   Use SSL for transport layer encryption (WinRM).
-
-``--sudo``, ``--no-sudo``
-   Run scans with sudo. Only activates on Unix and non-root user.
-
-``--sudo-command=SUDO_COMMAND``
-   Alternate command for sudo.
-
-``--sudo-options=SUDO_OPTIONS``
-   Additional sudo options for a remote scan.
-
-``--sudo-password=SUDO_PASSWORD``
-   Specify a sudo password, if it is required.
-
-``-t``, ``--target=TARGET``
-   Simple targeting option using URIs, e.g. ssh://user:pass@host:port
-
-``--user=USER``
-   The login user for a remote scan.
-
-
-
-help
-=====================================================
-
-Describe available commands or one specific command
-
-Syntax
------------------------------------------------------
-
-This subcommand has the following syntax:
-
-.. code-block:: bash
-
-   $ inspec help [COMMAND]
-
-
-
-init
-=====================================================
-
-Scaffolds a new project
-
-Syntax
------------------------------------------------------
-
-This subcommand has the following syntax:
-
-.. code-block:: bash
-
-   $ inspec init TEMPLATE ...
-
-
-
-json
-=====================================================
-
-Read all tests in path and generate a json summary
-
-Syntax
------------------------------------------------------
-
-This subcommand has the following syntax:
-
-.. code-block:: bash
-
-   $ inspec json PATH
-
-Options
------------------------------------------------------
-
-This subcommand has additional options:
-
-``--controls=one two three``
-   A list of controls to include. Ignore all other tests.
-
-``-o``, ``--output=OUTPUT``
-   Save the created profile to a path
-
-``--profiles-path=PROFILES_PATH``
-   Folder which contains referenced profiles.
-
-
-
-shell
-=====================================================
-
-Open an interactive debugging shell
-
-Syntax
------------------------------------------------------
-
-This subcommand has the following syntax:
-
-.. code-block:: bash
-
-   $ inspec shell
-
-Options
------------------------------------------------------
-
-This subcommand has additional options:
-
-``-b``, ``--backend=BACKEND``
-   Choose a backend: local, ssh, winrm, docker.
-
-``-c``, ``--command=COMMAND``
-   A single command string to run instead of launching the shell
-
-``--host=HOST``
-   Specify a remote host which is tested.
-
-``--json-config=JSON_CONFIG``
-   Read configuration from JSON file (`-` reads from stdin).
-
-``-i``, ``--key-files=one two three``
-   Login key or certificate file for a remote scan.
-
-``-l``, ``--log-level=LOG_LEVEL``
-   Set the log level: info (default), debug, warn, error
-
-``--password=PASSWORD``
-   Login password for a remote scan, if required.
-
-``--path=PATH``
-   Login path to use when connecting to the target (WinRM).
-
-``-p``, ``--port=N``
-   Specify the login port for a remote scan.
-
-``--self-signed``, ``--no-self-signed``
-   Allow remote scans with self-signed certificates (WinRM).
-
-``--ssl``, ``--no-ssl``
-   Use SSL for transport layer encryption (WinRM).
-
-``--sudo``, ``--no-sudo``
-   Run scans with sudo. Only activates on Unix and non-root user.
-
-``--sudo-command=SUDO_COMMAND``
-   Alternate command for sudo.
-
-``--sudo-options=SUDO_OPTIONS``
-   Additional sudo options for a remote scan.
-
-``--sudo-password=SUDO_PASSWORD``
-   Specify a sudo password, if it is required.
-
-``-t``, ``--target=TARGET``
-   Simple targeting option using URIs, e.g. ssh://user:pass@host:port
-
-``--user=USER``
-   The login user for a remote scan.
-
-
-
-supermarket
-=====================================================
-
-Supermarket commands
-
-Syntax
------------------------------------------------------
-
-This subcommand has the following syntax:
-
-.. code-block:: bash
-
-   $ inspec supermarket SUBCOMMAND ...
-
-
-
-vendor
-=====================================================
-
-Download all dependencies and generate a lockfile
-
-Syntax
------------------------------------------------------
-
-This subcommand has the following syntax:
-
-.. code-block:: bash
-
-   $ inspec vendor
-
-
-
-version
-=====================================================
-
-Prints the version of this tool
-
-Syntax
------------------------------------------------------
-
-This subcommand has the following syntax:
-
-.. code-block:: bash
-
-   $ inspec version
-
-
-