inspec 0.9.7 → 0.9.8

data/lib/resources/mount.rb

@@ -0,0 +1,57 @@
+# encoding: utf-8
+# author: Christoph Hartmann
+# author: Dominik Richter
+
+require 'utils/simpleconfig'
+
+class Mount < Inspec.resource(1)
+  name 'mount'
+  desc 'Use the mount InSpec audit resource to test if mount points.'
+  example "
+    describe mount('/') do
+      it { should be_mounted }
+      its(:count) { should eq 1 }
+      its('device') { should eq  '/dev/mapper/VolGroup-lv_root' }
+      its('type') { should eq  'ext4' }
+      its('options') { should eq ['rw', 'mode=620'] }
+    end
+  "
+  include MountParser
+
+  attr_reader :file
+
+  def initialize(path)
+    @path = path
+    return skip_resource 'The `mount` resource is not supported on your OS yet.' if !inspec.os.linux?
+    @file = inspec.backend.file(@path)
+  end
+
+  def mounted?
+    file.mounted?
+  end
+
+  def count
+    mounted = file.mounted
+    return nil if mounted.nil? || mounted.stdout.nil?
+    mounted.stdout.lines.count
+  end
+
+  def method_missing(name)
+    return nil if !file.mounted?
+
+    mounted = file.mounted
+    return nil if mounted.nil? || mounted.stdout.nil?
+
+    line = mounted.stdout
+    # if we got multiple lines, only use the last entry
+    line = mounted.stdout.lines.to_a.last if mounted.stdout.lines.count > 1
+
+    # parse content if we are on linux
+    @mount_options ||= parse_mount_options(line)
+    @mount_options[name]
+  end
+
+  def to_s
+    "Mount #{@path}"
+  end
+end

data/lib/resources/passwd.rb

@@ -37,7 +37,7 @@ class Passwd < Inspec.resource(1)
     end
   "
 
-  include ContentParser
+  include PasswdParser
 
   attr_reader :uid
   attr_reader :parsed

data/lib/resources/user.rb

@@ -230,7 +230,8 @@ class UnixUser < UserInfo
 end
 
 class LinuxUser < UnixUser
-  include ContentParser
+  include PasswdParser
+  include CommentParser
 
   def meta_info(username)
     cmd = inspec.command("getent passwd #{username}")
@@ -295,7 +296,7 @@ end
 # - chpass(1)	A flexible tool for changing user database information.
 # - passwd(1)	The command-line tool to change user passwords.
 class FreeBSDUser < UnixUser
-  include ContentParser
+  include PasswdParser
 
   def meta_info(username)
     cmd = inspec.command("pw usershow #{username} -7")

data/lib/utils/hash.rb

@@ -1,13 +1,41 @@
 # encoding: utf-8
-# Inspired by: http://stackoverflow.com/a/9381776
 # author: Dominik Richter
 # author: Christoph Hartmann
 
 class ::Hash
+  # Inspired by: http://stackoverflow.com/a/9381776
   def deep_merge(second)
     merger = proc { |_key, v1, v2|
       v1.is_a?(Hash) && v2.is_a?(Hash) ? v1.merge(v2, &merger) : v2
     }
     merge(second, &merger)
   end
+
+  # converts a deep hash into a flat hash
+  # hash = {
+  #   'a' => 1,
+  #   'b' => {'c' => 2},
+  # }
+  # hash.smash # => {"a"=>1, "b-c"=>2}
+  def smash(prefix = nil)
+    inject({}) do |acc, (key, value)|
+      index = prefix.to_s + key.to_s
+      if value.is_a?(Hash)
+        acc.merge(value.smash(index + '-'))
+      else
+        acc.merge(index => value)
+      end
+    end
+  end
+
+  # deep check if all values are contained
+  def contains(contains)
+    hash = smash
+    contains = contains.smash
+
+    contains.each do |key, val|
+      return false if hash[key] != val
+    end
+    true
+  end
 end

data/lib/utils/parser.rb

@@ -2,7 +2,7 @@
 # author: Christoph Hartmann
 # author: Dominik Richter
 
-module ContentParser
+module PasswdParser
   # Parse /etc/passwd files.
   #
   # @param [String] content the raw content of /etc/passwd
@@ -29,7 +29,9 @@ module ContentParser
       'shell' => x.at(6),
     }
   end
+end
 
+module CommentParser
   # Parse a line with a command. For example: `a = b   # comment`.
   # Retrieves the actual content.
   #
@@ -59,3 +61,34 @@ module ContentParser
     [line, idx_nl]
   end
 end
+
+module MountParser
+  # this parses the output of mount command (only tested on linux)
+  # this method expects only one line of the mount output
+  def parse_mount_options(mount_line, compatibility = false)
+    mount = mount_line.scan(/\S+/)
+
+    # parse device and type
+    mount_options    = { device: mount[0], type: mount[4] }
+
+    if compatibility == false
+      # parse options as array
+      mount_options[:options] = mount[5].gsub(/\(|\)/, '').split(',')
+    else
+      # parse options as serverspec uses it, tbis is deprecated
+      mount_options[:options] = {}
+      mount[5].gsub(/\(|\)/, '').split(',').each do |option|
+        name, val = option.split('=')
+        if val.nil?
+          val = true
+        else
+          # parse numbers
+          val = val.to_i if val.match(/^\d+$/)
+        end
+        mount_options[:options][name.to_sym] = val
+      end
+    end
+
+    mount_options
+  end
+end

data/lib/utils/simpleconfig.rb

@@ -7,7 +7,7 @@
 require 'utils/parser'
 
 class SimpleConfig
-  include ContentParser
+  include CommentParser
 
   attr_reader :params, :groups
   def initialize(raw_data, opts = {})

data/test/chefdk/.gitignore

@@ -0,0 +1,16 @@
+.vagrant
+Berksfile.lock
+*~
+*#
+.#*
+\#*#
+.*.sw[a-z]
+*.un~
+
+# Bundler
+Gemfile.lock
+bin/*
+.bundle/*
+
+.kitchen/
+.kitchen.local.yml

data/test/chefdk/.kitchen.yml

@@ -0,0 +1,27 @@
+---
+driver:
+  name: vagrant
+
+## The forwarded_port port feature lets you connect to ports on the VM guest via
+## localhost on the host.
+## see also: https://docs.vagrantup.com/v2/networking/forwarded_ports.html
+
+#  network:
+#    - ["forwarded_port", {guest: 80, host: 8080}]
+
+provisioner:
+  name: policyfile_zero
+
+## require_chef_omnibus specifies a specific chef version to install. You can
+## also set this to `true` to always use the latest version.
+## see also: https://docs.chef.io/config_yml_kitchen.html
+
+#  require_chef_omnibus: 12.5.0
+
+platforms:
+  - name: ubuntu-14.04
+  - name: centos-7.1
+
+suites:
+  - name: default
+    attributes:

data/test/chefdk/Policyfile.rb

@@ -0,0 +1,16 @@
+# Policyfile.rb - Describe how you want Chef to build your system.
+#
+# For more information on the Policyfile feature, visit
+# https://github.com/opscode/chef-dk/blob/master/POLICYFILE_README.md
+
+# A name that describes what the system you're building with Chef does.
+name "chefdk"
+
+# Where to find external cookbooks:
+default_source :supermarket
+
+# run_list: chef-client will run these recipes in the order specified.
+run_list "chefdk::default"
+
+# Specify a custom source for a single cookbook:
+cookbook "chefdk", path: "."

data/test/chefdk/README.md

@@ -0,0 +1,4 @@
+# chefdk
+
+TODO: Enter the cookbook description here.
+

data/test/chefdk/chefignore

@@ -0,0 +1,100 @@
+# Put files/directories that should be ignored in this file when uploading
+# or sharing to the community site.
+# Lines that start with '# ' are comments.
+
+# OS generated files #
+######################
+.DS_Store
+Icon?
+nohup.out
+ehthumbs.db
+Thumbs.db
+
+# SASS #
+########
+.sass-cache
+
+# EDITORS #
+###########
+\#*
+.#*
+*~
+*.sw[a-z]
+*.bak
+REVISION
+TAGS*
+tmtags
+*_flymake.*
+*_flymake
+*.tmproj
+.project
+.settings
+mkmf.log
+
+## COMPILED ##
+##############
+a.out
+*.o
+*.pyc
+*.so
+*.com
+*.class
+*.dll
+*.exe
+*/rdoc/
+
+# Testing #
+###########
+.watchr
+.rspec
+spec/*
+spec/fixtures/*
+test/*
+features/*
+examples/*
+Guardfile
+Procfile
+.kitchen*
+.rubocop.yml
+
+# SCM #
+#######
+.git
+*/.git
+.gitignore
+.gitmodules
+.gitconfig
+.gitattributes
+.svn
+*/.bzr/*
+*/.hg/*
+*/.svn/*
+
+# Berkshelf #
+#############
+Berksfile
+Berksfile.lock
+cookbooks/*
+tmp
+
+# Cookbooks #
+#############
+CONTRIBUTING*
+CHANGELOG*
+TESTING*
+
+# Strainer #
+############
+Colanderfile
+Strainerfile
+.colander
+.strainer
+
+# Vagrant #
+###########
+.vagrant
+Vagrantfile
+
+# Travis #
+##########
+.travis.yml

data/test/chefdk/metadata.rb

@@ -0,0 +1,7 @@
+name 'chefdk'
+maintainer 'The Authors'
+maintainer_email 'you@example.com'
+license 'all_rights'
+description 'Installs/Configures chefdk'
+long_description 'Installs/Configures chefdk'
+version '0.1.0'

data/test/chefdk/recipes/default.rb

@@ -0,0 +1,5 @@
+#
+# Cookbook Name:: chefdk
+# Recipe:: default
+#
+# Copyright (c) 2015 The Authors, All Rights Reserved.

data/test/chefdk/spec/spec_helper.rb

@@ -0,0 +1,2 @@
+require 'chefspec'
+require 'chefspec/berkshelf'

data/test/chefdk/spec/unit/recipes/default_spec.rb

@@ -0,0 +1,20 @@
+#
+# Cookbook Name:: chefdk
+# Spec:: default
+#
+# Copyright (c) 2015 The Authors, All Rights Reserved.
+
+require 'spec_helper'
+
+describe 'chefdk::default' do
+  context 'When all attributes are default, on an unspecified platform' do
+    let(:chef_run) do
+      runner = ChefSpec::ServerRunner.new
+      runner.converge(described_recipe)
+    end
+
+    it 'converges successfully' do
+      expect { chef_run }.to_not raise_error
+    end
+  end
+end

data/test/chefdk/test/integration/default/serverspec/default_spec.rb

@@ -0,0 +1,9 @@
+require 'spec_helper'
+
+describe 'chefdk::default' do
+  # Serverspec examples can be found at
+  # http://serverspec.org/resource_types.html
+  it 'does something' do
+    skip 'Replace this with meaningful tests'
+  end
+end

data/test/chefdk/test/integration/helpers/serverspec/spec_helper.rb

@@ -0,0 +1,8 @@
+require 'serverspec'
+
+if (/cygwin|mswin|mingw|bccwin|wince|emx/ =~ RUBY_PLATFORM).nil?
+  set :backend, :exec
+else
+  set :backend, :cmd
+  set :os, family: 'windows'
+end

data/test/helper.rb

@@ -196,7 +196,9 @@ class MockLoader
       # apache_conf
       'find /etc/apache2/ports.conf -maxdepth 1 -type f' => cmd.call('find-apache2-ports-conf'),
       'find /etc/apache2/conf-enabled/*.conf -maxdepth 1 -type f' => cmd.call('find-apache2-conf-enabled'),
-
+      # mount
+      "mount | grep -- ' on /'" => cmd.call("mount"),
+      "mount | grep -- ' on /mnt/iso-disk'" => cmd.call("mount-multiple"),
     }
 
     @backend

data/test/integration/.kitchen.ec2.yml

@@ -0,0 +1,67 @@
+driver:
+  name: ec2
+  region: eu-central-1
+  instance_type: m3.large
+  associate_public_ip: true
+  interface: dns
+
+transport:
+  ssh_key: /path/to/aws.pem
+  username: ec2-user
+
+platforms:
+  - name: windows-2012
+    driver:
+      image_id: ami-58f7fb45
+    transport:
+      username: administrator
+  - name: windows-2012r2
+    driver:
+      image_id: ami-f2f5f9ef
+    transport:
+      username: administrator
+  - name: suse-11sp3
+    driver:
+      image_id: ami-fc0033e1
+  - name: suse-12
+    driver:
+      image_id: ami-a22610bf
+  - name: redhat-65
+    driver:
+      image_id: ami-008ebf1d
+  - name: redhat-71
+    driver:
+      image_id: ami-dafdcfc7
+  - name: ubuntu-1204
+    driver:
+      image_id: ami-24232f39
+    transport:
+      username: ubuntu
+  - name: ubuntu-1404
+    driver:
+      image_id: ami-48272b55
+    transport:
+      username: ubuntu
+  - name: ubuntu-1510
+    driver:
+      image_id: ami-1b4a5977
+    transport:
+      username: ubuntu
+  - name: fedora-22
+    driver:
+      image_id: ami-a88eb0b5
+    transport:
+      username: fedora
+  - name: debian-8
+    driver:
+      image_id: ami-b092aaad
+    transport:
+      username: admin
+  - name: centos-7
+    driver:
+      image_id: ami-e68f82fb
+    transport:
+      username: centos
+  - name: aws-linux
+    driver:
+      image_id: ami-daaeaec7