inspec 2.1.0 → 2.1.10

data/lib/utils/filter_array.rb

@@ -1,27 +1,27 @@
-# encoding: utf-8
-# copyright: 2015, Chef Software, Inc.
-# author: Stephan Renatus
-
-class FilterArray
-  attr_accessor :rules
-  alias content rules
-
-  def initialize(rules)
-    @rules = rules
-  end
-
-  # allows for chaining
-  # .field('arch', 'b32').field('key', 'access').rules
-  def field(key, value = nil)
-    if value
-      res = rules.find_all { |r| r[key.to_sym] == value }
-      FilterArray.new(res)
-    else
-      rules.map { |h| h[key.to_sym] }.uniq
-    end
-  end
-
-  def method_missing(meth, *args)
-    field(meth, args[0])
-  end
-end
+# encoding: utf-8
+# copyright: 2015, Chef Software, Inc.
+# author: Stephan Renatus
+
+class FilterArray
+  attr_accessor :rules
+  alias content rules
+
+  def initialize(rules)
+    @rules = rules
+  end
+
+  # allows for chaining
+  # .field('arch', 'b32').field('key', 'access').rules
+  def field(key, value = nil)
+    if value
+      res = rules.find_all { |r| r[key.to_sym] == value }
+      FilterArray.new(res)
+    else
+      rules.map { |h| h[key.to_sym] }.uniq
+    end
+  end
+
+  def method_missing(meth, *args)
+    field(meth, args[0])
+  end
+end

data/lib/utils/find_files.rb

@@ -1,44 +1,44 @@
-# encoding: utf-8
-# copyright: 2015, Vulcano Security GmbH
-# author: Dominik Richter
-# author: Christoph Hartmann
-
-module FindFiles
-  TYPES = {
-    block: 'b',
-    character: 'c',
-    directory: 'd',
-    pipe: 'p',
-    file: 'f',
-    link: 'l',
-    socket: 's',
-    door: 'D',
-  }.freeze
-
-  # ignores errors
-  def find_files(path, opts = {})
-    find_files_or_error(path, opts) || []
-  end
-
-  def find_files_or_error(path, opts = {})
-    depth = opts[:depth]
-    type = TYPES[opts[:type].to_sym] if opts[:type]
-
-    cmd = "sh -c \'find #{path}"
-    cmd += " -type #{type}" unless type.nil?
-    cmd += " -maxdepth #{depth.to_i}" if depth.to_i > 0
-    cmd += "\'"
-
-    result = inspec.command(cmd)
-    exit_status = result.exit_status
-
-    unless exit_status == 0
-      warn "find_files(): exit #{exit_status} from `#{cmd}`"
-      return nil
-    end
-
-    result.stdout.split("\n")
-          .map(&:strip)
-          .find_all { |x| !x.empty? }
-  end
-end
+# encoding: utf-8
+# copyright: 2015, Vulcano Security GmbH
+# author: Dominik Richter
+# author: Christoph Hartmann
+
+module FindFiles
+  TYPES = {
+    block: 'b',
+    character: 'c',
+    directory: 'd',
+    pipe: 'p',
+    file: 'f',
+    link: 'l',
+    socket: 's',
+    door: 'D',
+  }.freeze
+
+  # ignores errors
+  def find_files(path, opts = {})
+    find_files_or_error(path, opts) || []
+  end
+
+  def find_files_or_error(path, opts = {})
+    depth = opts[:depth]
+    type = TYPES[opts[:type].to_sym] if opts[:type]
+
+    cmd = "sh -c \'find #{path}"
+    cmd += " -type #{type}" unless type.nil?
+    cmd += " -maxdepth #{depth.to_i}" if depth.to_i > 0
+    cmd += "\'"
+
+    result = inspec.command(cmd)
+    exit_status = result.exit_status
+
+    unless exit_status == 0
+      warn "find_files(): exit #{exit_status} from `#{cmd}`"
+      return nil
+    end
+
+    result.stdout.split("\n")
+          .map(&:strip)
+          .find_all { |x| !x.empty? }
+  end
+end

data/lib/utils/hash.rb

@@ -1,41 +1,41 @@
-# encoding: utf-8
-# author: Dominik Richter
-# author: Christoph Hartmann
-
-class ::Hash
-  # Inspired by: http://stackoverflow.com/a/9381776
-  def deep_merge(second)
-    merger = proc { |_key, v1, v2|
-      v1.is_a?(Hash) && v2.is_a?(Hash) ? v1.merge(v2, &merger) : v2
-    }
-    merge(second, &merger)
-  end
-
-  # converts a deep hash into a flat hash
-  # hash = {
-  #   'a' => 1,
-  #   'b' => {'c' => 2},
-  # }
-  # hash.smash # => {"a"=>1, "b-c"=>2}
-  def smash(prefix = nil)
-    inject({}) do |acc, (key, value)|
-      index = prefix.to_s + key.to_s
-      if value.is_a?(Hash)
-        acc.merge(value.smash(index + '-'))
-      else
-        acc.merge(index => value)
-      end
-    end
-  end
-
-  # deep check if all values are contained
-  def contains(contains)
-    hash = smash
-    contains = contains.smash
-
-    contains.each do |key, val|
-      return false if hash[key] != val
-    end
-    true
-  end
-end
+# encoding: utf-8
+# author: Dominik Richter
+# author: Christoph Hartmann
+
+class ::Hash
+  # Inspired by: http://stackoverflow.com/a/9381776
+  def deep_merge(second)
+    merger = proc { |_key, v1, v2|
+      v1.is_a?(Hash) && v2.is_a?(Hash) ? v1.merge(v2, &merger) : v2
+    }
+    merge(second, &merger)
+  end
+
+  # converts a deep hash into a flat hash
+  # hash = {
+  #   'a' => 1,
+  #   'b' => {'c' => 2},
+  # }
+  # hash.smash # => {"a"=>1, "b-c"=>2}
+  def smash(prefix = nil)
+    inject({}) do |acc, (key, value)|
+      index = prefix.to_s + key.to_s
+      if value.is_a?(Hash)
+        acc.merge(value.smash(index + '-'))
+      else
+        acc.merge(index => value)
+      end
+    end
+  end
+
+  # deep check if all values are contained
+  def contains(contains)
+    hash = smash
+    contains = contains.smash
+
+    contains.each do |key, val|
+      return false if hash[key] != val
+    end
+    true
+  end
+end

data/lib/utils/json_log.rb

@@ -1,18 +1,18 @@
-# encoding: utf-8
-# author: Christoph Hartmann
-
-require 'json'
-
-# a simple streaming json logger
-class Logger::JSONFormatter < Logger::Formatter
-  def call(severity, time, progname, msg)
-    puts JSON.generate(
-      {
-        'progname'=> progname,
-        'severity'=> severity,
-        'time'=> time,
-        'msg'=> msg,
-      },
-    )
-  end
-end
+# encoding: utf-8
+# author: Christoph Hartmann
+
+require 'json'
+
+# a simple streaming json logger
+class Logger::JSONFormatter < Logger::Formatter
+  def call(severity, time, progname, msg)
+    puts JSON.generate(
+      {
+        'progname'=> progname,
+        'severity'=> severity,
+        'time'=> time,
+        'msg'=> msg,
+      },
+    )
+  end
+end

data/lib/utils/latest_version.rb

@@ -1,22 +1,22 @@
-# encoding: utf-8
-# author: Christoph Hartmann
-
-require 'json'
-require 'net/http'
-
-class LatestInSpecVersion
-  # fetches the latest version from rubygems server
-  def latest
-    uri = URI('https://rubygems.org/api/v1/gems/inspec.json')
-    res = Net::HTTP.start(
-      uri.host, uri.port, use_ssl: uri.scheme == 'https',
-      open_timeout: 0.5, read_timeout: 0.5
-    ) { |http|
-      http.get(uri.path)
-    }
-    inspec_info = JSON.parse(res.body)
-    inspec_info['version']
-  rescue StandardError
-    nil
-  end
-end
+# encoding: utf-8
+# author: Christoph Hartmann
+
+require 'json'
+require 'net/http'
+
+class LatestInSpecVersion
+  # fetches the latest version from rubygems server
+  def latest
+    uri = URI('https://rubygems.org/api/v1/gems/inspec.json')
+    res = Net::HTTP.start(
+      uri.host, uri.port, use_ssl: uri.scheme == 'https',
+      open_timeout: 0.5, read_timeout: 0.5
+    ) { |http|
+      http.get(uri.path)
+    }
+    inspec_info = JSON.parse(res.body)
+    inspec_info['version']
+  rescue StandardError
+    nil
+  end
+end

data/lib/utils/modulator.rb

@@ -1,12 +1,12 @@
-# encoding: utf-8
-# author: Dominik Richter
-# author: Christoph Hartmann
-module Modulator
-  def modules
-    @modules ||= {}
-  end
-
-  def add_module(name, handler)
-    modules[name] = handler
-  end
-end
+# encoding: utf-8
+# author: Dominik Richter
+# author: Christoph Hartmann
+module Modulator
+  def modules
+    @modules ||= {}
+  end
+
+  def add_module(name, handler)
+    modules[name] = handler
+  end
+end

data/lib/utils/nginx_parser.rb

@@ -1,85 +1,85 @@
-# encoding: utf-8
-# author: Dominik Richter
-# author: Christoph Hartmann
-
-require 'parslet'
-
-class NginxParser < Parslet::Parser
-  root :outermost
-  # only designed for rabbitmq config files for now:
-  rule(:outermost) { filler? >> exp.repeat }
-
-  rule(:filler?) { one_filler.repeat }
-  rule(:one_filler) { match('\s+') | match["\n"] | comment }
-  rule(:space)   { match('\s+') }
-  rule(:comment) { str('#') >> (match["\n\r"].absent? >> any).repeat }
-
-  rule(:exp) {
-    section | assignment
-  }
-  rule(:assignment) {
-    (identifier >> values.maybe.as(:args)).as(:assignment) >> str(';') >> filler?
-  }
-
-  rule(:standard_identifier) {
-    (match('[a-zA-Z]') >> match('\S').repeat).as(:identifier) >> space >> space.repeat
-  }
-
-  rule(:quoted_identifier) {
-    str('"') >> (str('"').absent? >> any).repeat.as(:identifier) >> str('"') >> space.repeat
-  }
-
-  rule(:identifier) {
-    standard_identifier | quoted_identifier
-  }
-
-  rule(:value) {
-    ((match('[#;{]').absent? >> any) >> (
-      str('\\') >> any | match('[#;{]|\s').absent? >> any
-    ).repeat).as(:value) >> space.repeat
-  }
-
-  rule(:values) {
-    value.repeat >> space.maybe
-  }
-
-  rule(:section) {
-    identifier.as(:section) >> values.maybe.as(:args) >> str('{') >> filler? >> exp.repeat.as(:expressions) >> str('}') >> filler?
-  }
-end
-
-class NginxTransform < Parslet::Transform
-  Group = Struct.new(:id, :args, :body)
-  Exp = Struct.new(:key, :vals)
-
-  def self.assemble_binary(seq)
-    b = ErlangBitstream.new
-    seq.each { |i| b.add(i) }
-    b.value
-  end
-
-  rule(section: { identifier: simple(:x) }, args: subtree(:y), expressions: subtree(:z)) { Group.new(x.to_s, y, z) }
-  rule(assignment: { identifier: simple(:x), args: subtree(:y) }) { Exp.new(x.to_s, y) }
-  rule(value: simple(:x)) { x.to_s }
-end
-
-class NginxConfig
-  def self.parse(content)
-    lex = NginxParser.new.parse(content)
-    tree = NginxTransform.new.apply(lex)
-    gtree = NginxTransform::Group.new(nil, '', tree)
-    read_nginx_group(gtree)
-  rescue Parslet::ParseFailed => err
-    raise "Failed to parse NginX config: #{err}"
-  end
-
-  def self.read_nginx_group(t)
-    agg_conf = Hash.new([])
-    agg_conf['_'] = t.args unless t.args == ''
-
-    groups, conf = t.body.partition { |i| i.is_a? NginxTransform::Group }
-    conf.each { |x| agg_conf[x.key] += [x.vals] }
-    groups.each { |x| agg_conf[x.id] += [read_nginx_group(x)] }
-    agg_conf
-  end
-end
+# encoding: utf-8
+# author: Dominik Richter
+# author: Christoph Hartmann
+
+require 'parslet'
+
+class NginxParser < Parslet::Parser
+  root :outermost
+  # only designed for rabbitmq config files for now:
+  rule(:outermost) { filler? >> exp.repeat }
+
+  rule(:filler?) { one_filler.repeat }
+  rule(:one_filler) { match('\s+') | match["\n"] | comment }
+  rule(:space)   { match('\s+') }
+  rule(:comment) { str('#') >> (match["\n\r"].absent? >> any).repeat }
+
+  rule(:exp) {
+    section | assignment
+  }
+  rule(:assignment) {
+    (identifier >> values.maybe.as(:args)).as(:assignment) >> str(';') >> filler?
+  }
+
+  rule(:standard_identifier) {
+    (match('[a-zA-Z]') >> match('\S').repeat).as(:identifier) >> space >> space.repeat
+  }
+
+  rule(:quoted_identifier) {
+    str('"') >> (str('"').absent? >> any).repeat.as(:identifier) >> str('"') >> space.repeat
+  }
+
+  rule(:identifier) {
+    standard_identifier | quoted_identifier
+  }
+
+  rule(:value) {
+    ((match('[#;{]').absent? >> any) >> (
+      str('\\') >> any | match('[#;{]|\s').absent? >> any
+    ).repeat).as(:value) >> space.repeat
+  }
+
+  rule(:values) {
+    value.repeat >> space.maybe
+  }
+
+  rule(:section) {
+    identifier.as(:section) >> values.maybe.as(:args) >> str('{') >> filler? >> exp.repeat.as(:expressions) >> str('}') >> filler?
+  }
+end
+
+class NginxTransform < Parslet::Transform
+  Group = Struct.new(:id, :args, :body)
+  Exp = Struct.new(:key, :vals)
+
+  def self.assemble_binary(seq)
+    b = ErlangBitstream.new
+    seq.each { |i| b.add(i) }
+    b.value
+  end
+
+  rule(section: { identifier: simple(:x) }, args: subtree(:y), expressions: subtree(:z)) { Group.new(x.to_s, y, z) }
+  rule(assignment: { identifier: simple(:x), args: subtree(:y) }) { Exp.new(x.to_s, y) }
+  rule(value: simple(:x)) { x.to_s }
+end
+
+class NginxConfig
+  def self.parse(content)
+    lex = NginxParser.new.parse(content)
+    tree = NginxTransform.new.apply(lex)
+    gtree = NginxTransform::Group.new(nil, '', tree)
+    read_nginx_group(gtree)
+  rescue Parslet::ParseFailed => err
+    raise "Failed to parse NginX config: #{err}"
+  end
+
+  def self.read_nginx_group(t)
+    agg_conf = Hash.new([])
+    agg_conf['_'] = t.args unless t.args == ''
+
+    groups, conf = t.body.partition { |i| i.is_a? NginxTransform::Group }
+    conf.each { |x| agg_conf[x.key] += [x.vals] }
+    groups.each { |x| agg_conf[x.id] += [read_nginx_group(x)] }
+    agg_conf
+  end
+end