inspec 1.51.6 → 1.51.15

data/lib/resources/groups.rb

@@ -1,213 +1,213 @@
-# encoding: utf-8
-# author: Christoph Hartmann
-# author: Dominik Richter
-
-require 'utils/filter'
-
-module Inspec::Resources
-  # This file contains two resources, the `group` and `groups` resource.
-  # The `group` resource is optimized for requests that verify specific groups
-  # that you know upfront for testing. If you need to query all groups or search
-  # specific groups with certain properties, use the `groups` resource.
-  module GroupManagementSelector
-    # select group provider based on the operating system
-    # returns nil, if no group manager was found for the operating system
-    def select_group_manager(os)
-      @group_provider = if os.darwin?
-                          DarwinGroup.new(inspec)
-                        elsif os.unix?
-                          UnixGroup.new(inspec)
-                        elsif os.windows?
-                          WindowsGroup.new(inspec)
-                        end
-    end
-  end
-
-  class Groups < Inspec.resource(1)
-    include GroupManagementSelector
-
-    name 'groups'
-    desc 'Use the group InSpec audit resource to test groups on the system. Groups can be filtered.'
-    example "
-      describe groups.where { name == 'root'} do
-        its('names') { should eq ['root'] }
-        its('gids') { should eq [0] }
-      end
-
-      describe groups.where { name == 'Administrators'} do
-        its('names') { should eq ['Administrators'] }
-        its('gids') { should eq ['S-1-5-32-544'] }
-      end
-    "
-
-    def initialize
-      # select group manager
-      @group_provider = select_group_manager(inspec.os)
-      return skip_resource 'The `groups` resource is not supported on your OS yet.' if @group_provider.nil?
-    end
-
-    filter = FilterTable.create
-    filter.add_accessor(:where)
-          .add_accessor(:entries)
-          .add(:names,     field: 'name')
-          .add(:gids,      field: 'gid')
-          .add(:domains,   field: 'domain')
-          .add(:exists?) { |x| !x.entries.empty? }
-    filter.connect(self, :collect_group_details)
-
-    def to_s
-      'Groups'
-    end
-
-    private
-
-    # collects information about every group
-    def collect_group_details
-      return @groups_cache ||= @group_provider.groups unless @group_provider.nil?
-      []
-    end
-  end
-
-  # Usage:
-  # describe group('root') do
-  #   it { should exist }
-  #   its('gid') { should eq 0 }
-  # end
-  #
-  # deprecated has matcher
-  # describe group('root') do
-  #  it { should have_gid 0 }
-  # end
-  class Group < Inspec.resource(1)
-    include GroupManagementSelector
-
-    name 'group'
-    desc 'Use the group InSpec audit resource to test groups on the system.'
-    example "
-      describe group('root') do
-        it { should exist }
-        its('gid') { should eq 0 }
-      end
-    "
-
-    def initialize(groupname)
-      @group = groupname
-
-      # select group manager
-      @group_provider = select_group_manager(inspec.os)
-      return skip_resource 'The `group` resource is not supported on your OS yet.' if @group_provider.nil?
-    end
-
-    # verifies if a group exists
-    def exists?
-      !group_info.entries.empty?
-    end
-
-    def gid
-      gids = group_info.gids
-      if gids.empty?
-        nil
-      # the default case should be one group
-      elsif gids.size == 1
-        gids.entries[0]
-      else
-        raise 'found more than one group with the same name, please use `groups` resource'
-      end
-    end
-
-    # implements rspec has matcher, to be compatible with serverspec
-    def has_gid?(compare_gid)
-      gid == compare_gid
-    end
-
-    def local
-      # at this point the implementation only returns local groups
-      true
-    end
-
-    def to_s
-      "Group #{@group}"
-    end
-
-    private
-
-    def group_info
-      # we need a local copy for the block
-      group = @group.dup
-      @groups_cache ||= inspec.groups.where { name == group }
-    end
-  end
-
-  class GroupInfo
-    attr_reader :inspec
-    def initialize(inspec)
-      @inspec = inspec
-    end
-
-    def groups
-      raise 'group provider must implement the `groups` method'
-    end
-  end
-
-  # implements generic unix groups via /etc/group
-  class UnixGroup < GroupInfo
-    def groups
-      inspec.etc_group.entries
-    end
-  end
-
-  # OSX uses opendirectory for groups, so `/etc/group` may not be fully accurate
-  # This uses `dscacheutil` to get the group info instead of `etc_group`
-  class DarwinGroup < GroupInfo
-    def groups
-      group_info = inspec.command('dscacheutil -q group').stdout.split("\n\n")
-
-      groups = []
-      regex = /^([^:]*?)\s*:\s(.*?)\s*$/
-      group_info.each do |data|
-        groups << inspec.parse_config(data, assignment_regex: regex).params
-      end
-
-      # Convert the `dscacheutil` groups to match `inspec.etc_group.entries`
-      groups.each { |g| g['gid'] = g['gid'].to_i }
-      groups.each do |g|
-        next if g['users'].nil?
-        g['members'] = g.delete('users')
-        g['members'].tr!(' ', ',')
-      end
-    end
-  end
-
-  class WindowsGroup < GroupInfo
-    # returns all local groups
-    def groups
-      script = <<~EOH
-        Function  ConvertTo-SID { Param([byte[]]$BinarySID)
-          (New-Object  System.Security.Principal.SecurityIdentifier($BinarySID,0)).Value
-        }
-
-        $Computername =  $Env:Computername
-        $adsi  = [ADSI]"WinNT://$Computername"
-        $groups = $adsi.Children | where {$_.SchemaClassName -eq  'group'} |  ForEach {
-          $name = $_.Name[0]
-          $sid = ConvertTo-SID -BinarySID $_.ObjectSID[0]
-          $group =[ADSI]$_.Path
-          new-object psobject -property @{name = $group.Name[0]; gid = $sid; domain=$Computername}
-        }
-        $groups | ConvertTo-Json -Depth 3
-      EOH
-      cmd = inspec.powershell(script)
-      # cannot rely on exit code for now, successful command returns exit code 1
-      # return nil if cmd.exit_status != 0, try to parse json
-      begin
-        groups = JSON.parse(cmd.stdout)
-      rescue JSON::ParserError => _e
-        return []
-      end
-
-      # ensure we have an array of groups
-      groups = [groups] if !groups.is_a?(Array)
-      groups
-    end
-  end
-end
+# encoding: utf-8
+# author: Christoph Hartmann
+# author: Dominik Richter
+
+require 'utils/filter'
+
+module Inspec::Resources
+  # This file contains two resources, the `group` and `groups` resource.
+  # The `group` resource is optimized for requests that verify specific groups
+  # that you know upfront for testing. If you need to query all groups or search
+  # specific groups with certain properties, use the `groups` resource.
+  module GroupManagementSelector
+    # select group provider based on the operating system
+    # returns nil, if no group manager was found for the operating system
+    def select_group_manager(os)
+      @group_provider = if os.darwin?
+                          DarwinGroup.new(inspec)
+                        elsif os.unix?
+                          UnixGroup.new(inspec)
+                        elsif os.windows?
+                          WindowsGroup.new(inspec)
+                        end
+    end
+  end
+
+  class Groups < Inspec.resource(1)
+    include GroupManagementSelector
+
+    name 'groups'
+    desc 'Use the group InSpec audit resource to test groups on the system. Groups can be filtered.'
+    example "
+      describe groups.where { name == 'root'} do
+        its('names') { should eq ['root'] }
+        its('gids') { should eq [0] }
+      end
+
+      describe groups.where { name == 'Administrators'} do
+        its('names') { should eq ['Administrators'] }
+        its('gids') { should eq ['S-1-5-32-544'] }
+      end
+    "
+
+    def initialize
+      # select group manager
+      @group_provider = select_group_manager(inspec.os)
+      return skip_resource 'The `groups` resource is not supported on your OS yet.' if @group_provider.nil?
+    end
+
+    filter = FilterTable.create
+    filter.add_accessor(:where)
+          .add_accessor(:entries)
+          .add(:names,     field: 'name')
+          .add(:gids,      field: 'gid')
+          .add(:domains,   field: 'domain')
+          .add(:exists?) { |x| !x.entries.empty? }
+    filter.connect(self, :collect_group_details)
+
+    def to_s
+      'Groups'
+    end
+
+    private
+
+    # collects information about every group
+    def collect_group_details
+      return @groups_cache ||= @group_provider.groups unless @group_provider.nil?
+      []
+    end
+  end
+
+  # Usage:
+  # describe group('root') do
+  #   it { should exist }
+  #   its('gid') { should eq 0 }
+  # end
+  #
+  # deprecated has matcher
+  # describe group('root') do
+  #  it { should have_gid 0 }
+  # end
+  class Group < Inspec.resource(1)
+    include GroupManagementSelector
+
+    name 'group'
+    desc 'Use the group InSpec audit resource to test groups on the system.'
+    example "
+      describe group('root') do
+        it { should exist }
+        its('gid') { should eq 0 }
+      end
+    "
+
+    def initialize(groupname)
+      @group = groupname
+
+      # select group manager
+      @group_provider = select_group_manager(inspec.os)
+      return skip_resource 'The `group` resource is not supported on your OS yet.' if @group_provider.nil?
+    end
+
+    # verifies if a group exists
+    def exists?
+      !group_info.entries.empty?
+    end
+
+    def gid
+      gids = group_info.gids
+      if gids.empty?
+        nil
+      # the default case should be one group
+      elsif gids.size == 1
+        gids.entries[0]
+      else
+        raise 'found more than one group with the same name, please use `groups` resource'
+      end
+    end
+
+    # implements rspec has matcher, to be compatible with serverspec
+    def has_gid?(compare_gid)
+      gid == compare_gid
+    end
+
+    def local
+      # at this point the implementation only returns local groups
+      true
+    end
+
+    def to_s
+      "Group #{@group}"
+    end
+
+    private
+
+    def group_info
+      # we need a local copy for the block
+      group = @group.dup
+      @groups_cache ||= inspec.groups.where { name == group }
+    end
+  end
+
+  class GroupInfo
+    attr_reader :inspec
+    def initialize(inspec)
+      @inspec = inspec
+    end
+
+    def groups
+      raise 'group provider must implement the `groups` method'
+    end
+  end
+
+  # implements generic unix groups via /etc/group
+  class UnixGroup < GroupInfo
+    def groups
+      inspec.etc_group.entries
+    end
+  end
+
+  # OSX uses opendirectory for groups, so `/etc/group` may not be fully accurate
+  # This uses `dscacheutil` to get the group info instead of `etc_group`
+  class DarwinGroup < GroupInfo
+    def groups
+      group_info = inspec.command('dscacheutil -q group').stdout.split("\n\n")
+
+      groups = []
+      regex = /^([^:]*?)\s*:\s(.*?)\s*$/
+      group_info.each do |data|
+        groups << inspec.parse_config(data, assignment_regex: regex).params
+      end
+
+      # Convert the `dscacheutil` groups to match `inspec.etc_group.entries`
+      groups.each { |g| g['gid'] = g['gid'].to_i }
+      groups.each do |g|
+        next if g['users'].nil?
+        g['members'] = g.delete('users')
+        g['members'].tr!(' ', ',')
+      end
+    end
+  end
+
+  class WindowsGroup < GroupInfo
+    # returns all local groups
+    def groups
+      script = <<~EOH
+        Function  ConvertTo-SID { Param([byte[]]$BinarySID)
+          (New-Object  System.Security.Principal.SecurityIdentifier($BinarySID,0)).Value
+        }
+
+        $Computername =  $Env:Computername
+        $adsi  = [ADSI]"WinNT://$Computername"
+        $groups = $adsi.Children | where {$_.SchemaClassName -eq  'group'} |  ForEach {
+          $name = $_.Name[0]
+          $sid = ConvertTo-SID -BinarySID $_.ObjectSID[0]
+          $group =[ADSI]$_.Path
+          new-object psobject -property @{name = $group.Name[0]; gid = $sid; domain=$Computername}
+        }
+        $groups | ConvertTo-Json -Depth 3
+      EOH
+      cmd = inspec.powershell(script)
+      # cannot rely on exit code for now, successful command returns exit code 1
+      # return nil if cmd.exit_status != 0, try to parse json
+      begin
+        groups = JSON.parse(cmd.stdout)
+      rescue JSON::ParserError => _e
+        return []
+      end
+
+      # ensure we have an array of groups
+      groups = [groups] if !groups.is_a?(Array)
+      groups
+    end
+  end
+end

data/lib/resources/grub_conf.rb

@@ -1,237 +1,237 @@
-# encoding: utf-8
-# author: Thomas Cate
-
-require 'utils/simpleconfig'
-
-class GrubConfig < Inspec.resource(1)
-  name 'grub_conf'
-  desc 'Use the grub_conf InSpec audit resource to test the boot config of Linux systems that use Grub.'
-  example "
-    describe grub_conf('/etc/grub.conf',  'default') do
-      its('kernel') { should include '/vmlinuz-2.6.32-573.7.1.el6.x86_64' }
-      its('initrd') { should include '/initramfs-2.6.32-573.el6.x86_64.img=1' }
-      its('default') { should_not eq '1' }
-      its('timeout') { should eq '5' }
-    end
-
-    also check specific kernels
-    describe grub_conf('/etc/grub.conf',  'CentOS (2.6.32-573.12.1.el6.x86_64)') do
-      its('kernel') { should include 'audit=1' }
-    end
-  "
-
-  class UnknownGrubConfig < StandardError; end
-
-  def initialize(path = nil, kernel = nil)
-    config_for_platform(path)
-    @kernel = kernel || 'default'
-  rescue UnknownGrubConfig
-    return skip_resource 'The `grub_config` resource is not supported on your OS yet.'
-  end
-
-  def config_for_platform(path)
-    os = inspec.os
-    if os.redhat? || os[:name] == 'fedora'
-      config_for_redhatish(path)
-    elsif os.debian?
-      @conf_path = path || '/boot/grub/grub.cfg'
-      @defaults_path = '/etc/default/grub'
-      @grubenv_path = '/boot/grub2/grubenv'
-      @version = 'grub2'
-    elsif os[:name] == 'amazon'
-      @conf_path = path || '/etc/grub.conf'
-      @version = 'legacy'
-    else
-      raise UnknownGrubConfig
-    end
-  end
-
-  def config_for_redhatish(path)
-    if inspec.os[:release].to_f < 7
-      @conf_path = path || '/etc/grub.conf'
-      @version = 'legacy'
-    else
-      @conf_path = path || '/boot/grub2/grub.cfg'
-      @defaults_path = '/etc/default/grub'
-      @grubenv_path = '/boot/grub2/grubenv'
-      @version = 'grub2'
-    end
-  end
-
-  def method_missing(name)
-    read_params[name.to_s]
-  end
-
-  def to_s
-    'Grub Config'
-  end
-
-  private
-
-  ######################################################################
-  # Grub2 This is used by all supported versions of Ubuntu and Rhel 7+ #
-  ######################################################################
-
-  def grub2_parse_kernel_lines(content, conf)
-    menu_entries = extract_menu_entries(content)
-
-    if @kernel == 'default'
-      default_menu_entry(menu_entries, conf['GRUB_DEFAULT'])
-    else
-      menu_entries.find { |entry| entry['name'] == @kernel }
-    end
-  end
-
-  def extract_menu_entries(content)
-    menu_entries = []
-
-    lines = content.split("\n")
-    lines.each_with_index do |line, index|
-      next unless line =~ /^menuentry\s+.*/
-      entry = {}
-      entry['insmod'] = []
-
-      # Extract name from menuentry line
-      capture_data = line.match(/(?:^|\s+).*menuentry\s*['|"](.*)['|"]\s*--/)
-      if capture_data.nil? || capture_data.captures[0].nil?
-        raise Inspec::Exceptions::ResourceFailed "Failed to extract menuentry name from #{line}"
-      end
-
-      entry['name'] = capture_data.captures[0]
-
-      # Begin processing from index forward until a `}` line is met
-      lines.drop(index+1).each do |mline|
-        break if mline =~ /^\s*}\s*$/
-        case mline
-        when /(?:^|\s*)initrd.*/
-          entry['initrd'] = mline.split(' ')[1]
-        when /(?:^|\s*)linux.*/
-          entry['kernel'] = mline.split
-        when /(?:^|\s*)set root=.*/
-          entry['root'] = mline.split('=')[1].tr('\'', '')
-        when /(?:^|\s*)insmod.*/
-          entry['insmod'] << mline.split(' ')[1]
-        end
-      end
-
-      menu_entries << entry
-    end
-
-    menu_entries
-  end
-
-  def default_menu_entry(menu_entries, default)
-    # If the default entry isn't `saved` then a number is used as an index.
-    # By default this is `0`, which would be the first item in the list.
-    return menu_entries[default.to_i] unless default == 'saved'
-
-    grubenv_contents = inspec.file(@grubenv_path).content
-
-    # The location of the grubenv file is not guaranteed. In the case that
-    # the file does not exist this will return the 0th entry. This will also
-    # return the 0th entry if InSpec lacks permission to read the file. Both
-    # of these reflect the default Grub2 behavior.
-    return menu_entries[0] if grubenv_contents.nil?
-
-    default_name = SimpleConfig.new(grubenv_contents).params['saved_entry']
-    default_entry = menu_entries.select { |k| k['name'] == default_name }[0]
-    return default_entry unless default_entry.nil?
-
-    # It is possible for the saved entry to not be valid . For example, grubenv
-    # not being up to date. If so, the 0th entry is the default.
-    menu_entries[0]
-  end
-
-  ###################################################################
-  # Grub1 aka legacy-grub config. Primarily used by Centos/Rhel 6.x #
-  ###################################################################
-
-  def parse_kernel_lines(content, conf)
-    # Find all "title" lines and then parse them into arrays
-    menu_entry = 0
-    lines = content.split("\n")
-    kernel_opts = {}
-    lines.each_with_index do |file_line, index|
-      next unless file_line =~ /^title.*/
-      current_kernel = file_line.split(' ', 2)[1]
-      lines.drop(index+1).each do |kernel_line|
-        if kernel_line =~ /^\s.*/
-          option_type = kernel_line.split(' ')[0]
-          line_options = kernel_line.split(' ').drop(1)
-          if (menu_entry == conf['default'].to_i && @kernel == 'default') || current_kernel == @kernel
-            if option_type == 'kernel'
-              kernel_opts['kernel'] = line_options
-            else
-              kernel_opts[option_type] = line_options[0]
-            end
-          end
-        else
-          menu_entry += 1
-          break
-        end
-      end
-    end
-    kernel_opts
-  end
-
-  def read_file(config_file)
-    file = inspec.file(config_file)
-
-    if !file.file? && !file.symlink?
-      skip_resource "Can't find file '#{@conf_path}'"
-      return @params = {}
-    end
-
-    content = file.content
-
-    if content.empty? && !file.empty?
-      skip_resource "Can't read file '#{@conf_path}'"
-      return @params = {}
-    end
-
-    content
-  end
-
-  def read_params
-    return @params if defined?(@params)
-
-    content = read_file(@conf_path)
-
-    if @version == 'legacy'
-      # parse the file
-      conf = SimpleConfig.new(
-        content,
-        multiple_values: true,
-      ).params
-      # convert single entry arrays into strings
-      conf.each do |key, value|
-        if value.size == 1
-          conf[key] = conf[key][0].to_s
-        end
-      end
-      kernel_opts = parse_kernel_lines(content, conf)
-      @params = conf.merge(kernel_opts)
-    end
-
-    if @version == 'grub2'
-      # read defaults
-      defaults = read_file(@defaults_path)
-
-      conf = SimpleConfig.new(
-        defaults,
-        multiple_values: true,
-      ).params
-
-      # convert single entry arrays into strings
-      conf.each do |key, value|
-        if value.size == 1
-          conf[key] = conf[key][0].to_s
-        end
-      end
-
-      kernel_opts = grub2_parse_kernel_lines(content, conf)
-      @params = conf.merge(kernel_opts)
-    end
-    @params
-  end
-end
+# encoding: utf-8
+# author: Thomas Cate
+
+require 'utils/simpleconfig'
+
+class GrubConfig < Inspec.resource(1)
+  name 'grub_conf'
+  desc 'Use the grub_conf InSpec audit resource to test the boot config of Linux systems that use Grub.'
+  example "
+    describe grub_conf('/etc/grub.conf',  'default') do
+      its('kernel') { should include '/vmlinuz-2.6.32-573.7.1.el6.x86_64' }
+      its('initrd') { should include '/initramfs-2.6.32-573.el6.x86_64.img=1' }
+      its('default') { should_not eq '1' }
+      its('timeout') { should eq '5' }
+    end
+
+    also check specific kernels
+    describe grub_conf('/etc/grub.conf',  'CentOS (2.6.32-573.12.1.el6.x86_64)') do
+      its('kernel') { should include 'audit=1' }
+    end
+  "
+
+  class UnknownGrubConfig < StandardError; end
+
+  def initialize(path = nil, kernel = nil)
+    config_for_platform(path)
+    @kernel = kernel || 'default'
+  rescue UnknownGrubConfig
+    return skip_resource 'The `grub_config` resource is not supported on your OS yet.'
+  end
+
+  def config_for_platform(path)
+    os = inspec.os
+    if os.redhat? || os[:name] == 'fedora'
+      config_for_redhatish(path)
+    elsif os.debian?
+      @conf_path = path || '/boot/grub/grub.cfg'
+      @defaults_path = '/etc/default/grub'
+      @grubenv_path = '/boot/grub2/grubenv'
+      @version = 'grub2'
+    elsif os[:name] == 'amazon'
+      @conf_path = path || '/etc/grub.conf'
+      @version = 'legacy'
+    else
+      raise UnknownGrubConfig
+    end
+  end
+
+  def config_for_redhatish(path)
+    if inspec.os[:release].to_f < 7
+      @conf_path = path || '/etc/grub.conf'
+      @version = 'legacy'
+    else
+      @conf_path = path || '/boot/grub2/grub.cfg'
+      @defaults_path = '/etc/default/grub'
+      @grubenv_path = '/boot/grub2/grubenv'
+      @version = 'grub2'
+    end
+  end
+
+  def method_missing(name)
+    read_params[name.to_s]
+  end
+
+  def to_s
+    'Grub Config'
+  end
+
+  private
+
+  ######################################################################
+  # Grub2 This is used by all supported versions of Ubuntu and Rhel 7+ #
+  ######################################################################
+
+  def grub2_parse_kernel_lines(content, conf)
+    menu_entries = extract_menu_entries(content)
+
+    if @kernel == 'default'
+      default_menu_entry(menu_entries, conf['GRUB_DEFAULT'])
+    else
+      menu_entries.find { |entry| entry['name'] == @kernel }
+    end
+  end
+
+  def extract_menu_entries(content)
+    menu_entries = []
+
+    lines = content.split("\n")
+    lines.each_with_index do |line, index|
+      next unless line =~ /^menuentry\s+.*/
+      entry = {}
+      entry['insmod'] = []
+
+      # Extract name from menuentry line
+      capture_data = line.match(/(?:^|\s+).*menuentry\s*['|"](.*)['|"]\s*--/)
+      if capture_data.nil? || capture_data.captures[0].nil?
+        raise Inspec::Exceptions::ResourceFailed "Failed to extract menuentry name from #{line}"
+      end
+
+      entry['name'] = capture_data.captures[0]
+
+      # Begin processing from index forward until a `}` line is met
+      lines.drop(index+1).each do |mline|
+        break if mline =~ /^\s*}\s*$/
+        case mline
+        when /(?:^|\s*)initrd.*/
+          entry['initrd'] = mline.split(' ')[1]
+        when /(?:^|\s*)linux.*/
+          entry['kernel'] = mline.split
+        when /(?:^|\s*)set root=.*/
+          entry['root'] = mline.split('=')[1].tr('\'', '')
+        when /(?:^|\s*)insmod.*/
+          entry['insmod'] << mline.split(' ')[1]
+        end
+      end
+
+      menu_entries << entry
+    end
+
+    menu_entries
+  end
+
+  def default_menu_entry(menu_entries, default)
+    # If the default entry isn't `saved` then a number is used as an index.
+    # By default this is `0`, which would be the first item in the list.
+    return menu_entries[default.to_i] unless default == 'saved'
+
+    grubenv_contents = inspec.file(@grubenv_path).content
+
+    # The location of the grubenv file is not guaranteed. In the case that
+    # the file does not exist this will return the 0th entry. This will also
+    # return the 0th entry if InSpec lacks permission to read the file. Both
+    # of these reflect the default Grub2 behavior.
+    return menu_entries[0] if grubenv_contents.nil?
+
+    default_name = SimpleConfig.new(grubenv_contents).params['saved_entry']
+    default_entry = menu_entries.select { |k| k['name'] == default_name }[0]
+    return default_entry unless default_entry.nil?
+
+    # It is possible for the saved entry to not be valid . For example, grubenv
+    # not being up to date. If so, the 0th entry is the default.
+    menu_entries[0]
+  end
+
+  ###################################################################
+  # Grub1 aka legacy-grub config. Primarily used by Centos/Rhel 6.x #
+  ###################################################################
+
+  def parse_kernel_lines(content, conf)
+    # Find all "title" lines and then parse them into arrays
+    menu_entry = 0
+    lines = content.split("\n")
+    kernel_opts = {}
+    lines.each_with_index do |file_line, index|
+      next unless file_line =~ /^title.*/
+      current_kernel = file_line.split(' ', 2)[1]
+      lines.drop(index+1).each do |kernel_line|
+        if kernel_line =~ /^\s.*/
+          option_type = kernel_line.split(' ')[0]
+          line_options = kernel_line.split(' ').drop(1)
+          if (menu_entry == conf['default'].to_i && @kernel == 'default') || current_kernel == @kernel
+            if option_type == 'kernel'
+              kernel_opts['kernel'] = line_options
+            else
+              kernel_opts[option_type] = line_options[0]
+            end
+          end
+        else
+          menu_entry += 1
+          break
+        end
+      end
+    end
+    kernel_opts
+  end
+
+  def read_file(config_file)
+    file = inspec.file(config_file)
+
+    if !file.file? && !file.symlink?
+      skip_resource "Can't find file '#{@conf_path}'"
+      return @params = {}
+    end
+
+    content = file.content
+
+    if content.empty? && !file.empty?
+      skip_resource "Can't read file '#{@conf_path}'"
+      return @params = {}
+    end
+
+    content
+  end
+
+  def read_params
+    return @params if defined?(@params)
+
+    content = read_file(@conf_path)
+
+    if @version == 'legacy'
+      # parse the file
+      conf = SimpleConfig.new(
+        content,
+        multiple_values: true,
+      ).params
+      # convert single entry arrays into strings
+      conf.each do |key, value|
+        if value.size == 1
+          conf[key] = conf[key][0].to_s
+        end
+      end
+      kernel_opts = parse_kernel_lines(content, conf)
+      @params = conf.merge(kernel_opts)
+    end
+
+    if @version == 'grub2'
+      # read defaults
+      defaults = read_file(@defaults_path)
+
+      conf = SimpleConfig.new(
+        defaults,
+        multiple_values: true,
+      ).params
+
+      # convert single entry arrays into strings
+      conf.each do |key, value|
+        if value.size == 1
+          conf[key] = conf[key][0].to_s
+        end
+      end
+
+      kernel_opts = grub2_parse_kernel_lines(content, conf)
+      @params = conf.merge(kernel_opts)
+    end
+    @params
+  end
+end