inspec 2.2.55 → 2.2.61

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (161) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +24 -8
  3. data/docs/resources/aide_conf.md.erb +10 -0
  4. data/docs/resources/apache.md.erb +10 -0
  5. data/docs/resources/apache_conf.md.erb +10 -0
  6. data/docs/resources/apt.md.erb +10 -0
  7. data/docs/resources/audit_policy.md.erb +10 -0
  8. data/docs/resources/auditd.md.erb +10 -0
  9. data/docs/resources/auditd_conf.md.erb +10 -0
  10. data/docs/resources/aws_cloudtrail_trail.md.erb +10 -0
  11. data/docs/resources/aws_cloudtrail_trails.md.erb +10 -0
  12. data/docs/resources/aws_cloudwatch_alarm.md.erb +10 -0
  13. data/docs/resources/aws_cloudwatch_log_metric_filter.md.erb +10 -0
  14. data/docs/resources/aws_config_delivery_channel.md.erb +10 -0
  15. data/docs/resources/aws_config_recorder.md.erb +10 -0
  16. data/docs/resources/aws_ec2_instance.md.erb +10 -0
  17. data/docs/resources/aws_ec2_instances.md.erb +10 -0
  18. data/docs/resources/aws_elb.md.erb +10 -0
  19. data/docs/resources/aws_elbs.md.erb +10 -0
  20. data/docs/resources/aws_flow_log.md.erb +10 -0
  21. data/docs/resources/aws_iam_access_key.md.erb +10 -0
  22. data/docs/resources/aws_iam_access_keys.md.erb +10 -0
  23. data/docs/resources/aws_iam_group.md.erb +10 -0
  24. data/docs/resources/aws_iam_groups.md.erb +10 -0
  25. data/docs/resources/aws_iam_password_policy.md.erb +10 -0
  26. data/docs/resources/aws_iam_policies.md.erb +10 -0
  27. data/docs/resources/aws_iam_policy.md.erb +10 -0
  28. data/docs/resources/aws_iam_role.md.erb +10 -0
  29. data/docs/resources/aws_iam_root_user.md.erb +10 -0
  30. data/docs/resources/aws_iam_user.md.erb +10 -0
  31. data/docs/resources/aws_iam_users.md.erb +10 -0
  32. data/docs/resources/aws_kms_key.md.erb +10 -0
  33. data/docs/resources/aws_kms_keys.md.erb +10 -0
  34. data/docs/resources/aws_rds_instance.md.erb +10 -0
  35. data/docs/resources/aws_route_table.md.erb +10 -0
  36. data/docs/resources/aws_route_tables.md.erb +10 -0
  37. data/docs/resources/aws_s3_bucket.md.erb +10 -0
  38. data/docs/resources/aws_s3_bucket_object.md.erb +10 -0
  39. data/docs/resources/aws_s3_buckets.md.erb +10 -0
  40. data/docs/resources/aws_security_group.md.erb +10 -0
  41. data/docs/resources/aws_security_groups.md.erb +10 -0
  42. data/docs/resources/aws_sns_subscription.md.erb +10 -0
  43. data/docs/resources/aws_sns_topic.md.erb +10 -0
  44. data/docs/resources/aws_sns_topics.md.erb +10 -0
  45. data/docs/resources/aws_subnet.md.erb +10 -0
  46. data/docs/resources/aws_subnets.md.erb +10 -0
  47. data/docs/resources/aws_vpc.md.erb +10 -0
  48. data/docs/resources/aws_vpcs.md.erb +10 -0
  49. data/docs/resources/azure_generic_resource.md.erb +10 -0
  50. data/docs/resources/azure_resource_group.md.erb +10 -0
  51. data/docs/resources/azure_virtual_machine.md.erb +10 -0
  52. data/docs/resources/azure_virtual_machine_data_disk.md.erb +10 -0
  53. data/docs/resources/bash.md.erb +10 -0
  54. data/docs/resources/bond.md.erb +10 -0
  55. data/docs/resources/bridge.md.erb +10 -0
  56. data/docs/resources/bsd_service.md.erb +10 -0
  57. data/docs/resources/chocolatey_package.md.erb +10 -0
  58. data/docs/resources/command.md.erb +10 -0
  59. data/docs/resources/cpan.md.erb +10 -0
  60. data/docs/resources/cran.md.erb +10 -0
  61. data/docs/resources/crontab.md.erb +10 -0
  62. data/docs/resources/csv.md.erb +10 -0
  63. data/docs/resources/dh_params.md.erb +10 -0
  64. data/docs/resources/directory.md.erb +10 -0
  65. data/docs/resources/docker.md.erb +21 -0
  66. data/docs/resources/docker_container.md.erb +10 -0
  67. data/docs/resources/docker_image.md.erb +10 -0
  68. data/docs/resources/docker_plugin.md.erb +80 -0
  69. data/docs/resources/docker_service.md.erb +10 -0
  70. data/docs/resources/elasticsearch.md.erb +10 -0
  71. data/docs/resources/etc_fstab.md.erb +10 -0
  72. data/docs/resources/etc_group.md.erb +10 -0
  73. data/docs/resources/etc_hosts.md.erb +10 -0
  74. data/docs/resources/etc_hosts_allow.md.erb +10 -0
  75. data/docs/resources/etc_hosts_deny.md.erb +10 -0
  76. data/docs/resources/file.md.erb +10 -0
  77. data/docs/resources/filesystem.md.erb +10 -0
  78. data/docs/resources/firewalld.md.erb +10 -0
  79. data/docs/resources/gem.md.erb +10 -0
  80. data/docs/resources/group.md.erb +10 -0
  81. data/docs/resources/grub_conf.md.erb +10 -0
  82. data/docs/resources/host.md.erb +10 -0
  83. data/docs/resources/http.md.erb +10 -0
  84. data/docs/resources/iis_app.md.erb +10 -0
  85. data/docs/resources/iis_site.md.erb +10 -0
  86. data/docs/resources/inetd_conf.md.erb +10 -0
  87. data/docs/resources/ini.md.erb +10 -0
  88. data/docs/resources/interface.md.erb +10 -0
  89. data/docs/resources/iptables.md.erb +10 -0
  90. data/docs/resources/json.md.erb +10 -0
  91. data/docs/resources/kernel_module.md.erb +10 -0
  92. data/docs/resources/kernel_parameter.md.erb +10 -0
  93. data/docs/resources/key_rsa.md.erb +10 -0
  94. data/docs/resources/launchd_service.md.erb +10 -0
  95. data/docs/resources/limits_conf.md.erb +10 -0
  96. data/docs/resources/login_defs.md.erb +10 -0
  97. data/docs/resources/mount.md.erb +10 -0
  98. data/docs/resources/mssql_session.md.erb +10 -0
  99. data/docs/resources/mysql_conf.md.erb +10 -0
  100. data/docs/resources/mysql_session.md.erb +10 -0
  101. data/docs/resources/nginx.md.erb +10 -0
  102. data/docs/resources/nginx_conf.md.erb +10 -0
  103. data/docs/resources/npm.md.erb +10 -0
  104. data/docs/resources/ntp_conf.md.erb +10 -0
  105. data/docs/resources/oneget.md.erb +10 -0
  106. data/docs/resources/oracledb_session.md.erb +10 -0
  107. data/docs/resources/os.md.erb +10 -0
  108. data/docs/resources/os_env.md.erb +10 -0
  109. data/docs/resources/package.md.erb +10 -0
  110. data/docs/resources/packages.md.erb +10 -0
  111. data/docs/resources/parse_config.md.erb +10 -0
  112. data/docs/resources/parse_config_file.md.erb +10 -0
  113. data/docs/resources/passwd.md.erb +10 -0
  114. data/docs/resources/pip.md.erb +10 -0
  115. data/docs/resources/port.md.erb +10 -0
  116. data/docs/resources/postgres_conf.md.erb +10 -0
  117. data/docs/resources/postgres_hba_conf.md.erb +10 -0
  118. data/docs/resources/postgres_ident_conf.md.erb +10 -0
  119. data/docs/resources/postgres_session.md.erb +10 -0
  120. data/docs/resources/powershell.md.erb +10 -0
  121. data/docs/resources/processes.md.erb +10 -0
  122. data/docs/resources/rabbitmq_config.md.erb +10 -0
  123. data/docs/resources/registry_key.md.erb +38 -2
  124. data/docs/resources/runit_service.md.erb +10 -0
  125. data/docs/resources/security_policy.md.erb +10 -0
  126. data/docs/resources/service.md.erb +10 -0
  127. data/docs/resources/shadow.md.erb +10 -0
  128. data/docs/resources/ssh_config.md.erb +10 -0
  129. data/docs/resources/sshd_config.md.erb +10 -0
  130. data/docs/resources/ssl.md.erb +10 -0
  131. data/docs/resources/sys_info.md.erb +10 -0
  132. data/docs/resources/systemd_service.md.erb +10 -0
  133. data/docs/resources/sysv_service.md.erb +10 -0
  134. data/docs/resources/upstart_service.md.erb +10 -0
  135. data/docs/resources/user.md.erb +10 -0
  136. data/docs/resources/users.md.erb +10 -0
  137. data/docs/resources/vbscript.md.erb +10 -0
  138. data/docs/resources/virtualization.md.erb +10 -0
  139. data/docs/resources/windows_feature.md.erb +10 -0
  140. data/docs/resources/windows_hotfix.md.erb +10 -0
  141. data/docs/resources/windows_task.md.erb +10 -0
  142. data/docs/resources/wmi.md.erb +10 -0
  143. data/docs/resources/x509_certificate.md.erb +10 -0
  144. data/docs/resources/xinetd_conf.md.erb +10 -0
  145. data/docs/resources/xml.md.erb +10 -0
  146. data/docs/resources/yaml.md.erb +10 -0
  147. data/docs/resources/yum.md.erb +10 -0
  148. data/docs/resources/zfs_dataset.md.erb +10 -0
  149. data/docs/resources/zfs_pool.md.erb +10 -0
  150. data/lib/inspec/base_cli.rb +2 -2
  151. data/lib/inspec/cli.rb +3 -2
  152. data/lib/inspec/resource.rb +2 -0
  153. data/lib/inspec/runner.rb +2 -4
  154. data/lib/inspec/version.rb +1 -1
  155. data/lib/resource_support/aws.rb +1 -0
  156. data/lib/resources/aws/aws_ecs_cluster.rb +84 -0
  157. data/lib/resources/aws/aws_route_table.rb +3 -3
  158. data/lib/resources/docker.rb +34 -0
  159. data/lib/resources/docker_plugin.rb +63 -0
  160. data/lib/resources/iis_app_pool.rb +116 -0
  161. metadata +6 -2
@@ -7,6 +7,16 @@ platform: azure
7
7
 
8
8
  Use the `azure_virtual_machine` InSpec audit resource to ensure that a Virtual Machine has been provisioned correctly.
9
9
 
10
+ ## Availability
11
+
12
+ ### Installation
13
+
14
+ This resource is distributed along with InSpec itself. You can use it automatically.
15
+
16
+ ### Version
17
+
18
+ This resource first became available in v2.0.16 of InSpec.
19
+
10
20
  ## Syntax
11
21
 
12
22
  The name of the machine and the resource group are required as properties to the resource.
@@ -7,6 +7,16 @@ platform: azure
7
7
 
8
8
  Use this resource to ensure that a specific data disk attached to a machine has been created properly.
9
9
 
10
+ ## Availability
11
+
12
+ ### Installation
13
+
14
+ This resource is distributed along with InSpec itself. You can use it automatically.
15
+
16
+ ### Version
17
+
18
+ This resource first became available in v2.0.16 of InSpec.
19
+
10
20
  ## Syntax
11
21
 
12
22
  The name of the resource group and machine are required to use this resource.
@@ -9,6 +9,16 @@ Use the `bash` InSpec audit resource to test an arbitrary command that is run on
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `command` resource block declares a command to be run, one (or more) expected outputs, and the location to which that output is sent:
@@ -9,6 +9,16 @@ Use the `bond` InSpec audit resource to test a logical, bonded network interface
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `bond` resource block declares a bonded network interface, and then specifies the properties of that bonded network interface to be tested:
@@ -9,6 +9,16 @@ Use the `bridge` InSpec audit resource to test basic network bridge properties,
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `bridge` resource block declares the bridge to be tested and what interface it should be associated with:
@@ -9,6 +9,16 @@ Use the `bsd_service` InSpec audit resource to test a service using a Berkeley O
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `bsd_service` resource block declares the name of a service and then one (or more) matchers to test the state of the service:
@@ -9,6 +9,16 @@ Use the `chocolatey_package` InSpec audit resource to test if the named [Chocola
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v2.1.30 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `chocolatey_package` resource block declares the name of a Chocolatey package to be tested:
@@ -9,6 +9,16 @@ Use the `command` InSpec audit resource to test an arbitrary command that is run
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `command` resource block declares a command to be run, one (or more) expected values, and the location to which that output is sent:
@@ -9,6 +9,16 @@ Use the `cpan` InSpec audit resource to test Perl modules that are installed by
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.43.5 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `cpan` resource block declares a package and (optionally) a package version:
@@ -9,6 +9,16 @@ Use the `cran` InSpec audit resource to test R modules that are installed from C
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.43.5 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `cran` resource block declares a package and (optionally) a package version:
@@ -9,6 +9,16 @@ Use the `crontab` InSpec audit resource to test the crontab entries for a partic
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.15.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `crontab` resource block declares a user (which defaults to the current user, if not specified), and then the details to be tested, such as the schedule elements for each crontab entry or the commands itself:
@@ -9,6 +9,16 @@ Use the `csv` InSpec audit resource to test configuration data in a CSV file.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `csv` resource block declares the configuration data to be tested:
@@ -9,6 +9,16 @@ Use the `dh_params` InSpec audit resource to test Diffie-Hellman (DH) parameters
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.19.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `dh_params` resource block declares a parameter file to be tested.
@@ -9,6 +9,16 @@ Use the `directory` InSpec audit resource to test if the file type is a director
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `directory` resource block declares the location of the directory to be tested, and then one (or more) matchers.
@@ -9,6 +9,16 @@ Use the `docker` InSpec audit resource to test configuration data for the Docker
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.21.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `docker` resource block declares allows you to write test for many containers:
@@ -148,6 +158,17 @@ Or execute the profile directly via URL:
148
158
  its('sizes') { should_not include "1.41 GB" }
149
159
  end
150
160
 
161
+ ### plugins
162
+
163
+ `plugins` returns information about Docker plugins as returned by [docker plugin ls](https://docs.docker.com/engine/reference/commandline/plugin/).
164
+
165
+ describe docker.plugins do
166
+ its('names') { should include ["store/weaveworks/net-plugin", "docker4x/cloudstor"] }
167
+ its('ids') { should cmp ["6ea8176de74b", "771d3ee7c7ea"] }
168
+ its('versions') { should cmp ["2.3.0", "18.03.1-ce-aws1"] }
169
+ its('enabled') { should cmp [true, false] }
170
+ end
171
+
151
172
  ### info
152
173
 
153
174
  `info` returns the parsed result of [docker info](https://docs.docker.com/engine/reference/commandline/info/)
@@ -9,6 +9,16 @@ Use the `docker_container` InSpec audit resource to test a Docker container.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.21.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `docker_container` resource block declares the configuration data to be tested:
@@ -9,6 +9,16 @@ Use the `docker_image` InSpec audit resource to verify a Docker image.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.21.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `docker_image` resource block declares the image:
@@ -0,0 +1,80 @@
1
+ ---
2
+ title: About the docker_plugin Resource
3
+ platform: linux
4
+ ---
5
+
6
+ # docker_plugin
7
+
8
+ Use the `docker_plugin` InSpec audit resource to verify a Docker plugin.
9
+
10
+ <br>
11
+
12
+ ## Syntax
13
+
14
+ A `docker_plugin` resource block declares the plugin:
15
+
16
+ describe docker_plugin('rexray/ebs') do
17
+ it { should exist }
18
+ its('id') { should_not eq '0ac30b93ad40' }
19
+ its('version') { should eq '0.11.1' }
20
+ it { should be_enabled }
21
+ end
22
+
23
+ <br>
24
+
25
+ ## Resource Parameter Examples
26
+
27
+ The resource allows you to pass in an plugin id:
28
+
29
+ describe docker_plugin(id: plugin_id) do
30
+ it { should be_enabled }
31
+ end
32
+
33
+ <br>
34
+
35
+ ## Properties
36
+
37
+ ### id
38
+
39
+ The `id` property returns the full plugin id:
40
+
41
+ describe docker_plugin('cloudstor/aws') do
42
+ its('id') { should eq '0ac30b93ad40' }
43
+ end
44
+
45
+ ### version
46
+
47
+ The `version` property tests the value of plugin version:
48
+
49
+ describe docker_plugin('cloudstor/aws') do
50
+ its('version') { should eq '0.11.0' }
51
+ end
52
+
53
+ ## Examples
54
+
55
+ ### Test a Docker plugin
56
+
57
+ describe docker_plugin('rexray/ebs') do
58
+ it { should exist }
59
+ its('id') { should_not eq '0ac30b93ad40' }
60
+ its('version') { should eq '0.11.1' }
61
+ it { should be_enabled }
62
+ end
63
+
64
+ <br>
65
+
66
+ ## Matchers
67
+
68
+ For a full list of available matchers, please visit our [Universal Matchers](https://www.inspec.io/docs/reference/matchers/).
69
+
70
+ ### exist
71
+
72
+ The `exist` matcher tests if the plugin is available on the node:
73
+
74
+ describe docker_plugin('rexray/ebs') do
75
+ it { should exist }
76
+ end
77
+
78
+ ### enabled
79
+
80
+ The `be_enabled` matches tests if the plugin is enabled
@@ -9,6 +9,16 @@ Use the `docker_service` InSpec audit resource to verify a docker swarm service.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.51.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `docker_service` resource block declares the service by name:
@@ -12,6 +12,16 @@ a variety of settings and statuses.
12
12
 
13
13
  <br>
14
14
 
15
+ ## Availability
16
+
17
+ ### Installation
18
+
19
+ This resource is distributed along with InSpec itself. You can use it automatically.
20
+
21
+ ### Version
22
+
23
+ This resource first became available in v1.43.5 of InSpec.
24
+
15
25
  ## Syntax
16
26
 
17
27
  describe elasticsearch do
@@ -9,6 +9,16 @@ Use the `etc_fstab` InSpec audit resource to test information about all partitio
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.37.6 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An etc_fstab rule specifies a device name, its mount point, its mount type, the options its mounted with,