inspec 2.2.55 → 2.2.61

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (161) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +24 -8
  3. data/docs/resources/aide_conf.md.erb +10 -0
  4. data/docs/resources/apache.md.erb +10 -0
  5. data/docs/resources/apache_conf.md.erb +10 -0
  6. data/docs/resources/apt.md.erb +10 -0
  7. data/docs/resources/audit_policy.md.erb +10 -0
  8. data/docs/resources/auditd.md.erb +10 -0
  9. data/docs/resources/auditd_conf.md.erb +10 -0
  10. data/docs/resources/aws_cloudtrail_trail.md.erb +10 -0
  11. data/docs/resources/aws_cloudtrail_trails.md.erb +10 -0
  12. data/docs/resources/aws_cloudwatch_alarm.md.erb +10 -0
  13. data/docs/resources/aws_cloudwatch_log_metric_filter.md.erb +10 -0
  14. data/docs/resources/aws_config_delivery_channel.md.erb +10 -0
  15. data/docs/resources/aws_config_recorder.md.erb +10 -0
  16. data/docs/resources/aws_ec2_instance.md.erb +10 -0
  17. data/docs/resources/aws_ec2_instances.md.erb +10 -0
  18. data/docs/resources/aws_elb.md.erb +10 -0
  19. data/docs/resources/aws_elbs.md.erb +10 -0
  20. data/docs/resources/aws_flow_log.md.erb +10 -0
  21. data/docs/resources/aws_iam_access_key.md.erb +10 -0
  22. data/docs/resources/aws_iam_access_keys.md.erb +10 -0
  23. data/docs/resources/aws_iam_group.md.erb +10 -0
  24. data/docs/resources/aws_iam_groups.md.erb +10 -0
  25. data/docs/resources/aws_iam_password_policy.md.erb +10 -0
  26. data/docs/resources/aws_iam_policies.md.erb +10 -0
  27. data/docs/resources/aws_iam_policy.md.erb +10 -0
  28. data/docs/resources/aws_iam_role.md.erb +10 -0
  29. data/docs/resources/aws_iam_root_user.md.erb +10 -0
  30. data/docs/resources/aws_iam_user.md.erb +10 -0
  31. data/docs/resources/aws_iam_users.md.erb +10 -0
  32. data/docs/resources/aws_kms_key.md.erb +10 -0
  33. data/docs/resources/aws_kms_keys.md.erb +10 -0
  34. data/docs/resources/aws_rds_instance.md.erb +10 -0
  35. data/docs/resources/aws_route_table.md.erb +10 -0
  36. data/docs/resources/aws_route_tables.md.erb +10 -0
  37. data/docs/resources/aws_s3_bucket.md.erb +10 -0
  38. data/docs/resources/aws_s3_bucket_object.md.erb +10 -0
  39. data/docs/resources/aws_s3_buckets.md.erb +10 -0
  40. data/docs/resources/aws_security_group.md.erb +10 -0
  41. data/docs/resources/aws_security_groups.md.erb +10 -0
  42. data/docs/resources/aws_sns_subscription.md.erb +10 -0
  43. data/docs/resources/aws_sns_topic.md.erb +10 -0
  44. data/docs/resources/aws_sns_topics.md.erb +10 -0
  45. data/docs/resources/aws_subnet.md.erb +10 -0
  46. data/docs/resources/aws_subnets.md.erb +10 -0
  47. data/docs/resources/aws_vpc.md.erb +10 -0
  48. data/docs/resources/aws_vpcs.md.erb +10 -0
  49. data/docs/resources/azure_generic_resource.md.erb +10 -0
  50. data/docs/resources/azure_resource_group.md.erb +10 -0
  51. data/docs/resources/azure_virtual_machine.md.erb +10 -0
  52. data/docs/resources/azure_virtual_machine_data_disk.md.erb +10 -0
  53. data/docs/resources/bash.md.erb +10 -0
  54. data/docs/resources/bond.md.erb +10 -0
  55. data/docs/resources/bridge.md.erb +10 -0
  56. data/docs/resources/bsd_service.md.erb +10 -0
  57. data/docs/resources/chocolatey_package.md.erb +10 -0
  58. data/docs/resources/command.md.erb +10 -0
  59. data/docs/resources/cpan.md.erb +10 -0
  60. data/docs/resources/cran.md.erb +10 -0
  61. data/docs/resources/crontab.md.erb +10 -0
  62. data/docs/resources/csv.md.erb +10 -0
  63. data/docs/resources/dh_params.md.erb +10 -0
  64. data/docs/resources/directory.md.erb +10 -0
  65. data/docs/resources/docker.md.erb +21 -0
  66. data/docs/resources/docker_container.md.erb +10 -0
  67. data/docs/resources/docker_image.md.erb +10 -0
  68. data/docs/resources/docker_plugin.md.erb +80 -0
  69. data/docs/resources/docker_service.md.erb +10 -0
  70. data/docs/resources/elasticsearch.md.erb +10 -0
  71. data/docs/resources/etc_fstab.md.erb +10 -0
  72. data/docs/resources/etc_group.md.erb +10 -0
  73. data/docs/resources/etc_hosts.md.erb +10 -0
  74. data/docs/resources/etc_hosts_allow.md.erb +10 -0
  75. data/docs/resources/etc_hosts_deny.md.erb +10 -0
  76. data/docs/resources/file.md.erb +10 -0
  77. data/docs/resources/filesystem.md.erb +10 -0
  78. data/docs/resources/firewalld.md.erb +10 -0
  79. data/docs/resources/gem.md.erb +10 -0
  80. data/docs/resources/group.md.erb +10 -0
  81. data/docs/resources/grub_conf.md.erb +10 -0
  82. data/docs/resources/host.md.erb +10 -0
  83. data/docs/resources/http.md.erb +10 -0
  84. data/docs/resources/iis_app.md.erb +10 -0
  85. data/docs/resources/iis_site.md.erb +10 -0
  86. data/docs/resources/inetd_conf.md.erb +10 -0
  87. data/docs/resources/ini.md.erb +10 -0
  88. data/docs/resources/interface.md.erb +10 -0
  89. data/docs/resources/iptables.md.erb +10 -0
  90. data/docs/resources/json.md.erb +10 -0
  91. data/docs/resources/kernel_module.md.erb +10 -0
  92. data/docs/resources/kernel_parameter.md.erb +10 -0
  93. data/docs/resources/key_rsa.md.erb +10 -0
  94. data/docs/resources/launchd_service.md.erb +10 -0
  95. data/docs/resources/limits_conf.md.erb +10 -0
  96. data/docs/resources/login_defs.md.erb +10 -0
  97. data/docs/resources/mount.md.erb +10 -0
  98. data/docs/resources/mssql_session.md.erb +10 -0
  99. data/docs/resources/mysql_conf.md.erb +10 -0
  100. data/docs/resources/mysql_session.md.erb +10 -0
  101. data/docs/resources/nginx.md.erb +10 -0
  102. data/docs/resources/nginx_conf.md.erb +10 -0
  103. data/docs/resources/npm.md.erb +10 -0
  104. data/docs/resources/ntp_conf.md.erb +10 -0
  105. data/docs/resources/oneget.md.erb +10 -0
  106. data/docs/resources/oracledb_session.md.erb +10 -0
  107. data/docs/resources/os.md.erb +10 -0
  108. data/docs/resources/os_env.md.erb +10 -0
  109. data/docs/resources/package.md.erb +10 -0
  110. data/docs/resources/packages.md.erb +10 -0
  111. data/docs/resources/parse_config.md.erb +10 -0
  112. data/docs/resources/parse_config_file.md.erb +10 -0
  113. data/docs/resources/passwd.md.erb +10 -0
  114. data/docs/resources/pip.md.erb +10 -0
  115. data/docs/resources/port.md.erb +10 -0
  116. data/docs/resources/postgres_conf.md.erb +10 -0
  117. data/docs/resources/postgres_hba_conf.md.erb +10 -0
  118. data/docs/resources/postgres_ident_conf.md.erb +10 -0
  119. data/docs/resources/postgres_session.md.erb +10 -0
  120. data/docs/resources/powershell.md.erb +10 -0
  121. data/docs/resources/processes.md.erb +10 -0
  122. data/docs/resources/rabbitmq_config.md.erb +10 -0
  123. data/docs/resources/registry_key.md.erb +38 -2
  124. data/docs/resources/runit_service.md.erb +10 -0
  125. data/docs/resources/security_policy.md.erb +10 -0
  126. data/docs/resources/service.md.erb +10 -0
  127. data/docs/resources/shadow.md.erb +10 -0
  128. data/docs/resources/ssh_config.md.erb +10 -0
  129. data/docs/resources/sshd_config.md.erb +10 -0
  130. data/docs/resources/ssl.md.erb +10 -0
  131. data/docs/resources/sys_info.md.erb +10 -0
  132. data/docs/resources/systemd_service.md.erb +10 -0
  133. data/docs/resources/sysv_service.md.erb +10 -0
  134. data/docs/resources/upstart_service.md.erb +10 -0
  135. data/docs/resources/user.md.erb +10 -0
  136. data/docs/resources/users.md.erb +10 -0
  137. data/docs/resources/vbscript.md.erb +10 -0
  138. data/docs/resources/virtualization.md.erb +10 -0
  139. data/docs/resources/windows_feature.md.erb +10 -0
  140. data/docs/resources/windows_hotfix.md.erb +10 -0
  141. data/docs/resources/windows_task.md.erb +10 -0
  142. data/docs/resources/wmi.md.erb +10 -0
  143. data/docs/resources/x509_certificate.md.erb +10 -0
  144. data/docs/resources/xinetd_conf.md.erb +10 -0
  145. data/docs/resources/xml.md.erb +10 -0
  146. data/docs/resources/yaml.md.erb +10 -0
  147. data/docs/resources/yum.md.erb +10 -0
  148. data/docs/resources/zfs_dataset.md.erb +10 -0
  149. data/docs/resources/zfs_pool.md.erb +10 -0
  150. data/lib/inspec/base_cli.rb +2 -2
  151. data/lib/inspec/cli.rb +3 -2
  152. data/lib/inspec/resource.rb +2 -0
  153. data/lib/inspec/runner.rb +2 -4
  154. data/lib/inspec/version.rb +1 -1
  155. data/lib/resource_support/aws.rb +1 -0
  156. data/lib/resources/aws/aws_ecs_cluster.rb +84 -0
  157. data/lib/resources/aws/aws_route_table.rb +3 -3
  158. data/lib/resources/docker.rb +34 -0
  159. data/lib/resources/docker_plugin.rb +63 -0
  160. data/lib/resources/iis_app_pool.rb +116 -0
  161. metadata +6 -2
@@ -9,6 +9,16 @@ Use the `etc_group` InSpec audit resource to test groups that are defined on Lin
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `etc_group` resource block declares a collection of properties to be tested:
@@ -9,6 +9,16 @@ Use the `etc_hosts` InSpec audit resource to test rules set to match IP addresse
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.37.6 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An etc/hosts rule specifies an IP address and what its hostname is along with optional aliases it can have.
@@ -9,6 +9,16 @@ Use the `etc_hosts_allow` InSpec audit resource to test rules defined for accept
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.39.1 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An etc/hosts.allow rule specifies one or more daemons mapped to one or more clients, with zero or more options to for accepting traffic when found.
@@ -9,6 +9,16 @@ Use the `etc_hosts_deny` InSpec audit resource to test rules for rejecting daemo
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.39.1 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An etc/hosts.deny rule specifies one or more daemons mapped to one or more clients, with zero or more options for rejecting traffic when found.
@@ -9,6 +9,16 @@ Use the `file` InSpec audit resource to test all system file types, including fi
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `file` resource block declares the location of the file type to be tested, the expected file type (if required), and one (or more) resource properties.
@@ -9,6 +9,16 @@ Use the `filesystem` InSpec resource to audit filesystem disk space usage.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.51.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `filesystem` resource block declares tests for disk space in a partition:
@@ -11,6 +11,16 @@ A firewalld has a number of zones that can be configured to allow and deny acces
11
11
 
12
12
  <br>
13
13
 
14
+ ## Availability
15
+
16
+ ### Installation
17
+
18
+ This resource is distributed along with InSpec itself. You can use it automatically.
19
+
20
+ ### Version
21
+
22
+ This resource first became available in v1.40.0 of InSpec.
23
+
14
24
  ## Syntax
15
25
 
16
26
  describe firewalld do
@@ -9,6 +9,16 @@ Use the `gem` InSpec audit resource to test if a global Gem package is installed
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `gem` resource block declares a package and (optionally) a package version:
@@ -9,6 +9,16 @@ Use the `group` InSpec audit resource to test groups on the system.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `group` resource block declares a group, and then the details to be tested, such as if the group is a local group, the group identifier, or if the group exists:
@@ -9,6 +9,16 @@ Grub is a boot loader on the Linux platform used to load and then transfer contr
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `grub_conf` resource block declares a list of settings in a `grub.conf` file:
@@ -9,6 +9,16 @@ Use the `host` InSpec audit resource to test the name used to refer to a specifi
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `host` resource block declares a host name, and then (depending on what is to be tested) a port and/or a protocol:
@@ -9,6 +9,16 @@ Use the `http` InSpec audit resource to test an http endpoint.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.10.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `http` resource block declares the configuration settings to be tested:
@@ -9,6 +9,16 @@ Use the `iis_app` InSpec audit resource to test the state of IIS on Windows Serv
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.28.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `iis_app` resource block declares details about the named site:
@@ -9,6 +9,16 @@ Use the `iis_site` InSpec audit resource to test the state of IIS on Windows Ser
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `iis_site` resource block declares details about the named site:
@@ -9,6 +9,16 @@ Use the `inetd_conf` InSpec audit resource to test if a service is listed in the
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `inetd_conf` resource block declares the list of services that are enabled in the `inetd.conf` file:
@@ -9,6 +9,16 @@ Use the `ini` InSpec audit resource to test settings in an INI file.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `ini` resource block declares the configuration settings to be tested:
@@ -12,6 +12,16 @@ Use the `interface` InSpec audit resource to test basic network adapter properti
12
12
 
13
13
  <br>
14
14
 
15
+ ## Availability
16
+
17
+ ### Installation
18
+
19
+ This resource is distributed along with InSpec itself. You can use it automatically.
20
+
21
+ ### Version
22
+
23
+ This resource first became available in v1.0.0 of InSpec.
24
+
15
25
  ## Syntax
16
26
 
17
27
  An `interface` resource block declares network interface properties to be tested:
@@ -9,6 +9,16 @@ Use the `iptables` InSpec audit resource to test rules that are defined in `ipta
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `iptables` resource block declares tests for rules in IP tables:
@@ -9,6 +9,16 @@ Use the `json` InSpec audit resource to test data in a JSON file.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `json` resource block declares the data to be tested. Assume the following JSON file:
@@ -15,6 +15,16 @@ method.
15
15
 
16
16
  <br>
17
17
 
18
+ ## Availability
19
+
20
+ ### Installation
21
+
22
+ This resource is distributed along with InSpec itself. You can use it automatically.
23
+
24
+ ### Version
25
+
26
+ This resource first became available in v1.0.0 of InSpec.
27
+
18
28
  ## Syntax
19
29
 
20
30
  A `kernel_module` resource block declares a module name, and then tests if that
@@ -9,6 +9,16 @@ Use the `kernel_parameter` InSpec audit resource to test kernel parameters on Li
9
9
  These parameters are located under `/proc/cmdline`.
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `kernel_parameter` resource block declares a parameter and then a value to be tested:
@@ -11,6 +11,16 @@ This resource is mainly useful when used in conjunction with the x509_certificat
11
11
 
12
12
  <br>
13
13
 
14
+ ## Availability
15
+
16
+ ### Installation
17
+
18
+ This resource is distributed along with InSpec itself. You can use it automatically.
19
+
20
+ ### Version
21
+
22
+ This resource first became available in v1.18.0 of InSpec.
23
+
14
24
  ## Syntax
15
25
 
16
26
  An `key_rsa` resource block declares a `key file` to be tested.
@@ -9,6 +9,16 @@ Use the ``launchd_service`` InSpec audit resource to test a service using Launch
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A ``launchd_service`` resource block declares the name of a service and then one (or more) matchers to test the state of the service:
@@ -20,6 +20,16 @@ Entries in the `limits.conf` file are similar to:
20
20
 
21
21
  <br>
22
22
 
23
+ ## Availability
24
+
25
+ ### Installation
26
+
27
+ This resource is distributed along with InSpec itself. You can use it automatically.
28
+
29
+ ### Version
30
+
31
+ This resource first became available in v1.0.0 of InSpec.
32
+
23
33
  ## Syntax
24
34
 
25
35
  A `limits_conf` resource block declares a domain to be tested, along with associated type, item, and value:
@@ -9,6 +9,16 @@ Use the `login_defs` InSpec audit resource to test configuration settings in the
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `login_defs` resource block declares the `login.defs` configuration data to be tested:
@@ -9,6 +9,16 @@ Use the `mount` InSpec audit resource to test the mount points on FreeBSD and Li
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `mount` resource block declares the synchronization settings that should be tested: