inspec 2.2.55 → 2.2.61

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (161) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +24 -8
  3. data/docs/resources/aide_conf.md.erb +10 -0
  4. data/docs/resources/apache.md.erb +10 -0
  5. data/docs/resources/apache_conf.md.erb +10 -0
  6. data/docs/resources/apt.md.erb +10 -0
  7. data/docs/resources/audit_policy.md.erb +10 -0
  8. data/docs/resources/auditd.md.erb +10 -0
  9. data/docs/resources/auditd_conf.md.erb +10 -0
  10. data/docs/resources/aws_cloudtrail_trail.md.erb +10 -0
  11. data/docs/resources/aws_cloudtrail_trails.md.erb +10 -0
  12. data/docs/resources/aws_cloudwatch_alarm.md.erb +10 -0
  13. data/docs/resources/aws_cloudwatch_log_metric_filter.md.erb +10 -0
  14. data/docs/resources/aws_config_delivery_channel.md.erb +10 -0
  15. data/docs/resources/aws_config_recorder.md.erb +10 -0
  16. data/docs/resources/aws_ec2_instance.md.erb +10 -0
  17. data/docs/resources/aws_ec2_instances.md.erb +10 -0
  18. data/docs/resources/aws_elb.md.erb +10 -0
  19. data/docs/resources/aws_elbs.md.erb +10 -0
  20. data/docs/resources/aws_flow_log.md.erb +10 -0
  21. data/docs/resources/aws_iam_access_key.md.erb +10 -0
  22. data/docs/resources/aws_iam_access_keys.md.erb +10 -0
  23. data/docs/resources/aws_iam_group.md.erb +10 -0
  24. data/docs/resources/aws_iam_groups.md.erb +10 -0
  25. data/docs/resources/aws_iam_password_policy.md.erb +10 -0
  26. data/docs/resources/aws_iam_policies.md.erb +10 -0
  27. data/docs/resources/aws_iam_policy.md.erb +10 -0
  28. data/docs/resources/aws_iam_role.md.erb +10 -0
  29. data/docs/resources/aws_iam_root_user.md.erb +10 -0
  30. data/docs/resources/aws_iam_user.md.erb +10 -0
  31. data/docs/resources/aws_iam_users.md.erb +10 -0
  32. data/docs/resources/aws_kms_key.md.erb +10 -0
  33. data/docs/resources/aws_kms_keys.md.erb +10 -0
  34. data/docs/resources/aws_rds_instance.md.erb +10 -0
  35. data/docs/resources/aws_route_table.md.erb +10 -0
  36. data/docs/resources/aws_route_tables.md.erb +10 -0
  37. data/docs/resources/aws_s3_bucket.md.erb +10 -0
  38. data/docs/resources/aws_s3_bucket_object.md.erb +10 -0
  39. data/docs/resources/aws_s3_buckets.md.erb +10 -0
  40. data/docs/resources/aws_security_group.md.erb +10 -0
  41. data/docs/resources/aws_security_groups.md.erb +10 -0
  42. data/docs/resources/aws_sns_subscription.md.erb +10 -0
  43. data/docs/resources/aws_sns_topic.md.erb +10 -0
  44. data/docs/resources/aws_sns_topics.md.erb +10 -0
  45. data/docs/resources/aws_subnet.md.erb +10 -0
  46. data/docs/resources/aws_subnets.md.erb +10 -0
  47. data/docs/resources/aws_vpc.md.erb +10 -0
  48. data/docs/resources/aws_vpcs.md.erb +10 -0
  49. data/docs/resources/azure_generic_resource.md.erb +10 -0
  50. data/docs/resources/azure_resource_group.md.erb +10 -0
  51. data/docs/resources/azure_virtual_machine.md.erb +10 -0
  52. data/docs/resources/azure_virtual_machine_data_disk.md.erb +10 -0
  53. data/docs/resources/bash.md.erb +10 -0
  54. data/docs/resources/bond.md.erb +10 -0
  55. data/docs/resources/bridge.md.erb +10 -0
  56. data/docs/resources/bsd_service.md.erb +10 -0
  57. data/docs/resources/chocolatey_package.md.erb +10 -0
  58. data/docs/resources/command.md.erb +10 -0
  59. data/docs/resources/cpan.md.erb +10 -0
  60. data/docs/resources/cran.md.erb +10 -0
  61. data/docs/resources/crontab.md.erb +10 -0
  62. data/docs/resources/csv.md.erb +10 -0
  63. data/docs/resources/dh_params.md.erb +10 -0
  64. data/docs/resources/directory.md.erb +10 -0
  65. data/docs/resources/docker.md.erb +21 -0
  66. data/docs/resources/docker_container.md.erb +10 -0
  67. data/docs/resources/docker_image.md.erb +10 -0
  68. data/docs/resources/docker_plugin.md.erb +80 -0
  69. data/docs/resources/docker_service.md.erb +10 -0
  70. data/docs/resources/elasticsearch.md.erb +10 -0
  71. data/docs/resources/etc_fstab.md.erb +10 -0
  72. data/docs/resources/etc_group.md.erb +10 -0
  73. data/docs/resources/etc_hosts.md.erb +10 -0
  74. data/docs/resources/etc_hosts_allow.md.erb +10 -0
  75. data/docs/resources/etc_hosts_deny.md.erb +10 -0
  76. data/docs/resources/file.md.erb +10 -0
  77. data/docs/resources/filesystem.md.erb +10 -0
  78. data/docs/resources/firewalld.md.erb +10 -0
  79. data/docs/resources/gem.md.erb +10 -0
  80. data/docs/resources/group.md.erb +10 -0
  81. data/docs/resources/grub_conf.md.erb +10 -0
  82. data/docs/resources/host.md.erb +10 -0
  83. data/docs/resources/http.md.erb +10 -0
  84. data/docs/resources/iis_app.md.erb +10 -0
  85. data/docs/resources/iis_site.md.erb +10 -0
  86. data/docs/resources/inetd_conf.md.erb +10 -0
  87. data/docs/resources/ini.md.erb +10 -0
  88. data/docs/resources/interface.md.erb +10 -0
  89. data/docs/resources/iptables.md.erb +10 -0
  90. data/docs/resources/json.md.erb +10 -0
  91. data/docs/resources/kernel_module.md.erb +10 -0
  92. data/docs/resources/kernel_parameter.md.erb +10 -0
  93. data/docs/resources/key_rsa.md.erb +10 -0
  94. data/docs/resources/launchd_service.md.erb +10 -0
  95. data/docs/resources/limits_conf.md.erb +10 -0
  96. data/docs/resources/login_defs.md.erb +10 -0
  97. data/docs/resources/mount.md.erb +10 -0
  98. data/docs/resources/mssql_session.md.erb +10 -0
  99. data/docs/resources/mysql_conf.md.erb +10 -0
  100. data/docs/resources/mysql_session.md.erb +10 -0
  101. data/docs/resources/nginx.md.erb +10 -0
  102. data/docs/resources/nginx_conf.md.erb +10 -0
  103. data/docs/resources/npm.md.erb +10 -0
  104. data/docs/resources/ntp_conf.md.erb +10 -0
  105. data/docs/resources/oneget.md.erb +10 -0
  106. data/docs/resources/oracledb_session.md.erb +10 -0
  107. data/docs/resources/os.md.erb +10 -0
  108. data/docs/resources/os_env.md.erb +10 -0
  109. data/docs/resources/package.md.erb +10 -0
  110. data/docs/resources/packages.md.erb +10 -0
  111. data/docs/resources/parse_config.md.erb +10 -0
  112. data/docs/resources/parse_config_file.md.erb +10 -0
  113. data/docs/resources/passwd.md.erb +10 -0
  114. data/docs/resources/pip.md.erb +10 -0
  115. data/docs/resources/port.md.erb +10 -0
  116. data/docs/resources/postgres_conf.md.erb +10 -0
  117. data/docs/resources/postgres_hba_conf.md.erb +10 -0
  118. data/docs/resources/postgres_ident_conf.md.erb +10 -0
  119. data/docs/resources/postgres_session.md.erb +10 -0
  120. data/docs/resources/powershell.md.erb +10 -0
  121. data/docs/resources/processes.md.erb +10 -0
  122. data/docs/resources/rabbitmq_config.md.erb +10 -0
  123. data/docs/resources/registry_key.md.erb +38 -2
  124. data/docs/resources/runit_service.md.erb +10 -0
  125. data/docs/resources/security_policy.md.erb +10 -0
  126. data/docs/resources/service.md.erb +10 -0
  127. data/docs/resources/shadow.md.erb +10 -0
  128. data/docs/resources/ssh_config.md.erb +10 -0
  129. data/docs/resources/sshd_config.md.erb +10 -0
  130. data/docs/resources/ssl.md.erb +10 -0
  131. data/docs/resources/sys_info.md.erb +10 -0
  132. data/docs/resources/systemd_service.md.erb +10 -0
  133. data/docs/resources/sysv_service.md.erb +10 -0
  134. data/docs/resources/upstart_service.md.erb +10 -0
  135. data/docs/resources/user.md.erb +10 -0
  136. data/docs/resources/users.md.erb +10 -0
  137. data/docs/resources/vbscript.md.erb +10 -0
  138. data/docs/resources/virtualization.md.erb +10 -0
  139. data/docs/resources/windows_feature.md.erb +10 -0
  140. data/docs/resources/windows_hotfix.md.erb +10 -0
  141. data/docs/resources/windows_task.md.erb +10 -0
  142. data/docs/resources/wmi.md.erb +10 -0
  143. data/docs/resources/x509_certificate.md.erb +10 -0
  144. data/docs/resources/xinetd_conf.md.erb +10 -0
  145. data/docs/resources/xml.md.erb +10 -0
  146. data/docs/resources/yaml.md.erb +10 -0
  147. data/docs/resources/yum.md.erb +10 -0
  148. data/docs/resources/zfs_dataset.md.erb +10 -0
  149. data/docs/resources/zfs_pool.md.erb +10 -0
  150. data/lib/inspec/base_cli.rb +2 -2
  151. data/lib/inspec/cli.rb +3 -2
  152. data/lib/inspec/resource.rb +2 -0
  153. data/lib/inspec/runner.rb +2 -4
  154. data/lib/inspec/version.rb +1 -1
  155. data/lib/resource_support/aws.rb +1 -0
  156. data/lib/resources/aws/aws_ecs_cluster.rb +84 -0
  157. data/lib/resources/aws/aws_route_table.rb +3 -3
  158. data/lib/resources/docker.rb +34 -0
  159. data/lib/resources/docker_plugin.rb +63 -0
  160. data/lib/resources/iis_app_pool.rb +116 -0
  161. metadata +6 -2
@@ -9,6 +9,16 @@ Use the `runit_service` InSpec audit resource to test a service using runit.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `runit_service` resource block declares the name of a service and then one (or more) matchers to test the state of the service:
@@ -9,6 +9,16 @@ Use the `security_policy` InSpec audit resource to test security policies on the
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `security_policy` resource block declares the name of a security policy and the value to be tested:
@@ -11,6 +11,16 @@ Under some circumstances, it may be necessary to specify the service manager by
11
11
 
12
12
  <br>
13
13
 
14
+ ## Availability
15
+
16
+ ### Installation
17
+
18
+ This resource is distributed along with InSpec itself. You can use it automatically.
19
+
20
+ ### Version
21
+
22
+ This resource first became available in v1.0.0 of InSpec.
23
+
14
24
  ## Syntax
15
25
 
16
26
  A `service` resource block declares the name of a service and then one (or more) matchers to test the state of the service:
@@ -26,6 +26,16 @@ The `shadow` resource understands this format, allows you to search on the field
26
26
 
27
27
  <br>
28
28
 
29
+ ## Availability
30
+
31
+ ### Installation
32
+
33
+ This resource is distributed along with InSpec itself. You can use it automatically.
34
+
35
+ ### Version
36
+
37
+ This resource first became available in v1.0.0 of InSpec.
38
+
29
39
  ## Resource Parameters
30
40
 
31
41
  The `shadow` resource takes one optional parameter: the path to the shadow file. If omitted, `/etc/shadow` is assumed.
@@ -9,6 +9,16 @@ Use the `ssh_config` InSpec audit resource to test OpenSSH client configuration
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `ssh_config` resource block declares the client OpenSSH configuration data to be tested:
@@ -9,6 +9,16 @@ Use the `sshd_config` InSpec audit resource to test configuration data for the O
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `sshd_config` resource block declares the client OpenSSH configuration data to be tested:
@@ -9,6 +9,16 @@ Use the `ssl` InSpec audit resource to test SSL settings for the named port.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `ssl` resource block declares an SSL port, and then other properties of the test like cipher and/or protocol:
@@ -9,6 +9,16 @@ Use the `sys_info` InSpec audit resource to test for operating system properties
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `sys_info` resource block declares the hostname to be tested:
@@ -9,6 +9,16 @@ Use the `systemd_service` InSpec audit resource to test a service using SystemD.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `systemd_service` resource block declares the name of a service and then one (or more) matchers to test the state of the service:
@@ -9,6 +9,16 @@ Use the `sysv_service` InSpec audit resource to test a service using SystemV.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `sysv_service` resource block declares the name of a service and then one (or more) matchers to test the state of the service:
@@ -9,6 +9,16 @@ Use the `upstart_service` InSpec audit resource to test a service using Upstart.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `upstart_service` resource block declares the name of a service and then one (or more) matchers to test the state of the service:
@@ -9,6 +9,16 @@ Use the `user` InSpec audit resource to test user profiles for a single, known/e
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `user` resource block declares a user name, and then one (or more) matchers:
@@ -9,6 +9,16 @@ Use the `users` InSpec audit resource to look up all local users available on th
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `users` resource block declares a user name, and then one (or more) matchers:
@@ -9,6 +9,16 @@ Use the `vbscript` InSpec audit resource to test a VBScript on the Windows platf
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `vbscript` resource block tests the output of a VBScript on the Windows platform:
@@ -9,6 +9,16 @@ Use the `virtualization` InSpec audit resource to test the virtualization platfo
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.28.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `virtualization` resource block declares the virtualization platform that should be tested:
@@ -9,6 +9,16 @@ Use the `windows_feature` InSpec audit resource to test features on Windows via
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `windows_feature` resource block declares the name of the Windows feature, tests if that feature is installed, and then returns information about that feature:
@@ -9,6 +9,16 @@ Use the `windows_hotfix` InSpec audit resource to test if the hotfix has been in
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.39.1 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `windows_hotfix` resource block declares a hotfix to validate:
@@ -10,6 +10,16 @@ Microsoft and application vendors use scheduled tasks to perform a variety of sy
10
10
 
11
11
  <br>
12
12
 
13
+ ## Availability
14
+
15
+ ### Installation
16
+
17
+ This resource is distributed along with InSpec itself. You can use it automatically.
18
+
19
+ ### Version
20
+
21
+ This resource first became available in v1.10.0 of InSpec.
22
+
13
23
  ## Syntax
14
24
 
15
25
  A `windows_task` resource block declares the name of the task (as its full path) and tests its configuration:
@@ -9,6 +9,16 @@ Use the `wmi` InSpec audit resource to test WMI settings on the Windows platform
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `wmi` resource block tests WMI settings on the Windows platform:
@@ -15,6 +15,16 @@ certificates.
15
15
 
16
16
  <br>
17
17
 
18
+ ## Availability
19
+
20
+ ### Installation
21
+
22
+ This resource is distributed along with InSpec itself. You can use it automatically.
23
+
24
+ ### Version
25
+
26
+ This resource first became available in v1.18.0 of InSpec.
27
+
18
28
  ## Syntax
19
29
 
20
30
  An `x509_certificate` resource block declares a certificate `key file` to be tested.
@@ -9,6 +9,16 @@ Use the `xinetd_conf` InSpec audit resource to test services under `/etc/xinet.d
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `xinetd_conf` resource block declares settings found in a `xinetd.conf` file for the named service:
@@ -9,6 +9,16 @@ Use the `xml` InSpec audit resource to test data in an XML file.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.37.6 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `xml` resource block declares the data to be tested. Assume the following XML file:
@@ -9,6 +9,16 @@ Use the `yaml` InSpec audit resource to test configuration data in a Yaml file.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `yaml` resource block declares the configuration data to be tested. Assume the following Yaml file:
@@ -9,6 +9,16 @@ Use the `yum` InSpec audit resource to test packages in the Yum repository.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `yum` resource block declares a package repo, tests if the package repository is present, and if it that package repository is a valid package source (i.e. "is enabled"):
@@ -9,6 +9,16 @@ Use the `zfs_dataset` InSpec audit resource to test the ZFS datasets on FreeBSD
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.16.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `zfs_dataset` resource block declares the ZFS dataset properties that should be tested:
@@ -9,6 +9,16 @@ Use the `zfs_pool` InSpec audit resource to test the ZFS pools on FreeBSD system
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.16.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `zfs_pool` resource block declares the ZFS pool properties that should be tested: