inspec 2.2.55 → 2.2.61

Sign up to get free protection for your applications and to get access to all the features.
Files changed (161) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +24 -8
  3. data/docs/resources/aide_conf.md.erb +10 -0
  4. data/docs/resources/apache.md.erb +10 -0
  5. data/docs/resources/apache_conf.md.erb +10 -0
  6. data/docs/resources/apt.md.erb +10 -0
  7. data/docs/resources/audit_policy.md.erb +10 -0
  8. data/docs/resources/auditd.md.erb +10 -0
  9. data/docs/resources/auditd_conf.md.erb +10 -0
  10. data/docs/resources/aws_cloudtrail_trail.md.erb +10 -0
  11. data/docs/resources/aws_cloudtrail_trails.md.erb +10 -0
  12. data/docs/resources/aws_cloudwatch_alarm.md.erb +10 -0
  13. data/docs/resources/aws_cloudwatch_log_metric_filter.md.erb +10 -0
  14. data/docs/resources/aws_config_delivery_channel.md.erb +10 -0
  15. data/docs/resources/aws_config_recorder.md.erb +10 -0
  16. data/docs/resources/aws_ec2_instance.md.erb +10 -0
  17. data/docs/resources/aws_ec2_instances.md.erb +10 -0
  18. data/docs/resources/aws_elb.md.erb +10 -0
  19. data/docs/resources/aws_elbs.md.erb +10 -0
  20. data/docs/resources/aws_flow_log.md.erb +10 -0
  21. data/docs/resources/aws_iam_access_key.md.erb +10 -0
  22. data/docs/resources/aws_iam_access_keys.md.erb +10 -0
  23. data/docs/resources/aws_iam_group.md.erb +10 -0
  24. data/docs/resources/aws_iam_groups.md.erb +10 -0
  25. data/docs/resources/aws_iam_password_policy.md.erb +10 -0
  26. data/docs/resources/aws_iam_policies.md.erb +10 -0
  27. data/docs/resources/aws_iam_policy.md.erb +10 -0
  28. data/docs/resources/aws_iam_role.md.erb +10 -0
  29. data/docs/resources/aws_iam_root_user.md.erb +10 -0
  30. data/docs/resources/aws_iam_user.md.erb +10 -0
  31. data/docs/resources/aws_iam_users.md.erb +10 -0
  32. data/docs/resources/aws_kms_key.md.erb +10 -0
  33. data/docs/resources/aws_kms_keys.md.erb +10 -0
  34. data/docs/resources/aws_rds_instance.md.erb +10 -0
  35. data/docs/resources/aws_route_table.md.erb +10 -0
  36. data/docs/resources/aws_route_tables.md.erb +10 -0
  37. data/docs/resources/aws_s3_bucket.md.erb +10 -0
  38. data/docs/resources/aws_s3_bucket_object.md.erb +10 -0
  39. data/docs/resources/aws_s3_buckets.md.erb +10 -0
  40. data/docs/resources/aws_security_group.md.erb +10 -0
  41. data/docs/resources/aws_security_groups.md.erb +10 -0
  42. data/docs/resources/aws_sns_subscription.md.erb +10 -0
  43. data/docs/resources/aws_sns_topic.md.erb +10 -0
  44. data/docs/resources/aws_sns_topics.md.erb +10 -0
  45. data/docs/resources/aws_subnet.md.erb +10 -0
  46. data/docs/resources/aws_subnets.md.erb +10 -0
  47. data/docs/resources/aws_vpc.md.erb +10 -0
  48. data/docs/resources/aws_vpcs.md.erb +10 -0
  49. data/docs/resources/azure_generic_resource.md.erb +10 -0
  50. data/docs/resources/azure_resource_group.md.erb +10 -0
  51. data/docs/resources/azure_virtual_machine.md.erb +10 -0
  52. data/docs/resources/azure_virtual_machine_data_disk.md.erb +10 -0
  53. data/docs/resources/bash.md.erb +10 -0
  54. data/docs/resources/bond.md.erb +10 -0
  55. data/docs/resources/bridge.md.erb +10 -0
  56. data/docs/resources/bsd_service.md.erb +10 -0
  57. data/docs/resources/chocolatey_package.md.erb +10 -0
  58. data/docs/resources/command.md.erb +10 -0
  59. data/docs/resources/cpan.md.erb +10 -0
  60. data/docs/resources/cran.md.erb +10 -0
  61. data/docs/resources/crontab.md.erb +10 -0
  62. data/docs/resources/csv.md.erb +10 -0
  63. data/docs/resources/dh_params.md.erb +10 -0
  64. data/docs/resources/directory.md.erb +10 -0
  65. data/docs/resources/docker.md.erb +21 -0
  66. data/docs/resources/docker_container.md.erb +10 -0
  67. data/docs/resources/docker_image.md.erb +10 -0
  68. data/docs/resources/docker_plugin.md.erb +80 -0
  69. data/docs/resources/docker_service.md.erb +10 -0
  70. data/docs/resources/elasticsearch.md.erb +10 -0
  71. data/docs/resources/etc_fstab.md.erb +10 -0
  72. data/docs/resources/etc_group.md.erb +10 -0
  73. data/docs/resources/etc_hosts.md.erb +10 -0
  74. data/docs/resources/etc_hosts_allow.md.erb +10 -0
  75. data/docs/resources/etc_hosts_deny.md.erb +10 -0
  76. data/docs/resources/file.md.erb +10 -0
  77. data/docs/resources/filesystem.md.erb +10 -0
  78. data/docs/resources/firewalld.md.erb +10 -0
  79. data/docs/resources/gem.md.erb +10 -0
  80. data/docs/resources/group.md.erb +10 -0
  81. data/docs/resources/grub_conf.md.erb +10 -0
  82. data/docs/resources/host.md.erb +10 -0
  83. data/docs/resources/http.md.erb +10 -0
  84. data/docs/resources/iis_app.md.erb +10 -0
  85. data/docs/resources/iis_site.md.erb +10 -0
  86. data/docs/resources/inetd_conf.md.erb +10 -0
  87. data/docs/resources/ini.md.erb +10 -0
  88. data/docs/resources/interface.md.erb +10 -0
  89. data/docs/resources/iptables.md.erb +10 -0
  90. data/docs/resources/json.md.erb +10 -0
  91. data/docs/resources/kernel_module.md.erb +10 -0
  92. data/docs/resources/kernel_parameter.md.erb +10 -0
  93. data/docs/resources/key_rsa.md.erb +10 -0
  94. data/docs/resources/launchd_service.md.erb +10 -0
  95. data/docs/resources/limits_conf.md.erb +10 -0
  96. data/docs/resources/login_defs.md.erb +10 -0
  97. data/docs/resources/mount.md.erb +10 -0
  98. data/docs/resources/mssql_session.md.erb +10 -0
  99. data/docs/resources/mysql_conf.md.erb +10 -0
  100. data/docs/resources/mysql_session.md.erb +10 -0
  101. data/docs/resources/nginx.md.erb +10 -0
  102. data/docs/resources/nginx_conf.md.erb +10 -0
  103. data/docs/resources/npm.md.erb +10 -0
  104. data/docs/resources/ntp_conf.md.erb +10 -0
  105. data/docs/resources/oneget.md.erb +10 -0
  106. data/docs/resources/oracledb_session.md.erb +10 -0
  107. data/docs/resources/os.md.erb +10 -0
  108. data/docs/resources/os_env.md.erb +10 -0
  109. data/docs/resources/package.md.erb +10 -0
  110. data/docs/resources/packages.md.erb +10 -0
  111. data/docs/resources/parse_config.md.erb +10 -0
  112. data/docs/resources/parse_config_file.md.erb +10 -0
  113. data/docs/resources/passwd.md.erb +10 -0
  114. data/docs/resources/pip.md.erb +10 -0
  115. data/docs/resources/port.md.erb +10 -0
  116. data/docs/resources/postgres_conf.md.erb +10 -0
  117. data/docs/resources/postgres_hba_conf.md.erb +10 -0
  118. data/docs/resources/postgres_ident_conf.md.erb +10 -0
  119. data/docs/resources/postgres_session.md.erb +10 -0
  120. data/docs/resources/powershell.md.erb +10 -0
  121. data/docs/resources/processes.md.erb +10 -0
  122. data/docs/resources/rabbitmq_config.md.erb +10 -0
  123. data/docs/resources/registry_key.md.erb +38 -2
  124. data/docs/resources/runit_service.md.erb +10 -0
  125. data/docs/resources/security_policy.md.erb +10 -0
  126. data/docs/resources/service.md.erb +10 -0
  127. data/docs/resources/shadow.md.erb +10 -0
  128. data/docs/resources/ssh_config.md.erb +10 -0
  129. data/docs/resources/sshd_config.md.erb +10 -0
  130. data/docs/resources/ssl.md.erb +10 -0
  131. data/docs/resources/sys_info.md.erb +10 -0
  132. data/docs/resources/systemd_service.md.erb +10 -0
  133. data/docs/resources/sysv_service.md.erb +10 -0
  134. data/docs/resources/upstart_service.md.erb +10 -0
  135. data/docs/resources/user.md.erb +10 -0
  136. data/docs/resources/users.md.erb +10 -0
  137. data/docs/resources/vbscript.md.erb +10 -0
  138. data/docs/resources/virtualization.md.erb +10 -0
  139. data/docs/resources/windows_feature.md.erb +10 -0
  140. data/docs/resources/windows_hotfix.md.erb +10 -0
  141. data/docs/resources/windows_task.md.erb +10 -0
  142. data/docs/resources/wmi.md.erb +10 -0
  143. data/docs/resources/x509_certificate.md.erb +10 -0
  144. data/docs/resources/xinetd_conf.md.erb +10 -0
  145. data/docs/resources/xml.md.erb +10 -0
  146. data/docs/resources/yaml.md.erb +10 -0
  147. data/docs/resources/yum.md.erb +10 -0
  148. data/docs/resources/zfs_dataset.md.erb +10 -0
  149. data/docs/resources/zfs_pool.md.erb +10 -0
  150. data/lib/inspec/base_cli.rb +2 -2
  151. data/lib/inspec/cli.rb +3 -2
  152. data/lib/inspec/resource.rb +2 -0
  153. data/lib/inspec/runner.rb +2 -4
  154. data/lib/inspec/version.rb +1 -1
  155. data/lib/resource_support/aws.rb +1 -0
  156. data/lib/resources/aws/aws_ecs_cluster.rb +84 -0
  157. data/lib/resources/aws/aws_route_table.rb +3 -3
  158. data/lib/resources/docker.rb +34 -0
  159. data/lib/resources/docker_plugin.rb +63 -0
  160. data/lib/resources/iis_app_pool.rb +116 -0
  161. metadata +6 -2
@@ -9,6 +9,16 @@ Use the `runit_service` InSpec audit resource to test a service using runit.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `runit_service` resource block declares the name of a service and then one (or more) matchers to test the state of the service:
@@ -9,6 +9,16 @@ Use the `security_policy` InSpec audit resource to test security policies on the
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `security_policy` resource block declares the name of a security policy and the value to be tested:
@@ -11,6 +11,16 @@ Under some circumstances, it may be necessary to specify the service manager by
11
11
 
12
12
  <br>
13
13
 
14
+ ## Availability
15
+
16
+ ### Installation
17
+
18
+ This resource is distributed along with InSpec itself. You can use it automatically.
19
+
20
+ ### Version
21
+
22
+ This resource first became available in v1.0.0 of InSpec.
23
+
14
24
  ## Syntax
15
25
 
16
26
  A `service` resource block declares the name of a service and then one (or more) matchers to test the state of the service:
@@ -26,6 +26,16 @@ The `shadow` resource understands this format, allows you to search on the field
26
26
 
27
27
  <br>
28
28
 
29
+ ## Availability
30
+
31
+ ### Installation
32
+
33
+ This resource is distributed along with InSpec itself. You can use it automatically.
34
+
35
+ ### Version
36
+
37
+ This resource first became available in v1.0.0 of InSpec.
38
+
29
39
  ## Resource Parameters
30
40
 
31
41
  The `shadow` resource takes one optional parameter: the path to the shadow file. If omitted, `/etc/shadow` is assumed.
@@ -9,6 +9,16 @@ Use the `ssh_config` InSpec audit resource to test OpenSSH client configuration
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `ssh_config` resource block declares the client OpenSSH configuration data to be tested:
@@ -9,6 +9,16 @@ Use the `sshd_config` InSpec audit resource to test configuration data for the O
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `sshd_config` resource block declares the client OpenSSH configuration data to be tested:
@@ -9,6 +9,16 @@ Use the `ssl` InSpec audit resource to test SSL settings for the named port.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `ssl` resource block declares an SSL port, and then other properties of the test like cipher and/or protocol:
@@ -9,6 +9,16 @@ Use the `sys_info` InSpec audit resource to test for operating system properties
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `sys_info` resource block declares the hostname to be tested:
@@ -9,6 +9,16 @@ Use the `systemd_service` InSpec audit resource to test a service using SystemD.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `systemd_service` resource block declares the name of a service and then one (or more) matchers to test the state of the service:
@@ -9,6 +9,16 @@ Use the `sysv_service` InSpec audit resource to test a service using SystemV.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `sysv_service` resource block declares the name of a service and then one (or more) matchers to test the state of the service:
@@ -9,6 +9,16 @@ Use the `upstart_service` InSpec audit resource to test a service using Upstart.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `upstart_service` resource block declares the name of a service and then one (or more) matchers to test the state of the service:
@@ -9,6 +9,16 @@ Use the `user` InSpec audit resource to test user profiles for a single, known/e
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `user` resource block declares a user name, and then one (or more) matchers:
@@ -9,6 +9,16 @@ Use the `users` InSpec audit resource to look up all local users available on th
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `users` resource block declares a user name, and then one (or more) matchers:
@@ -9,6 +9,16 @@ Use the `vbscript` InSpec audit resource to test a VBScript on the Windows platf
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `vbscript` resource block tests the output of a VBScript on the Windows platform:
@@ -9,6 +9,16 @@ Use the `virtualization` InSpec audit resource to test the virtualization platfo
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.28.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `virtualization` resource block declares the virtualization platform that should be tested:
@@ -9,6 +9,16 @@ Use the `windows_feature` InSpec audit resource to test features on Windows via
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `windows_feature` resource block declares the name of the Windows feature, tests if that feature is installed, and then returns information about that feature:
@@ -9,6 +9,16 @@ Use the `windows_hotfix` InSpec audit resource to test if the hotfix has been in
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.39.1 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `windows_hotfix` resource block declares a hotfix to validate:
@@ -10,6 +10,16 @@ Microsoft and application vendors use scheduled tasks to perform a variety of sy
10
10
 
11
11
  <br>
12
12
 
13
+ ## Availability
14
+
15
+ ### Installation
16
+
17
+ This resource is distributed along with InSpec itself. You can use it automatically.
18
+
19
+ ### Version
20
+
21
+ This resource first became available in v1.10.0 of InSpec.
22
+
13
23
  ## Syntax
14
24
 
15
25
  A `windows_task` resource block declares the name of the task (as its full path) and tests its configuration:
@@ -9,6 +9,16 @@ Use the `wmi` InSpec audit resource to test WMI settings on the Windows platform
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `wmi` resource block tests WMI settings on the Windows platform:
@@ -15,6 +15,16 @@ certificates.
15
15
 
16
16
  <br>
17
17
 
18
+ ## Availability
19
+
20
+ ### Installation
21
+
22
+ This resource is distributed along with InSpec itself. You can use it automatically.
23
+
24
+ ### Version
25
+
26
+ This resource first became available in v1.18.0 of InSpec.
27
+
18
28
  ## Syntax
19
29
 
20
30
  An `x509_certificate` resource block declares a certificate `key file` to be tested.
@@ -9,6 +9,16 @@ Use the `xinetd_conf` InSpec audit resource to test services under `/etc/xinet.d
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `xinetd_conf` resource block declares settings found in a `xinetd.conf` file for the named service:
@@ -9,6 +9,16 @@ Use the `xml` InSpec audit resource to test data in an XML file.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.37.6 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  An `xml` resource block declares the data to be tested. Assume the following XML file:
@@ -9,6 +9,16 @@ Use the `yaml` InSpec audit resource to test configuration data in a Yaml file.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `yaml` resource block declares the configuration data to be tested. Assume the following Yaml file:
@@ -9,6 +9,16 @@ Use the `yum` InSpec audit resource to test packages in the Yum repository.
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.0.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `yum` resource block declares a package repo, tests if the package repository is present, and if it that package repository is a valid package source (i.e. "is enabled"):
@@ -9,6 +9,16 @@ Use the `zfs_dataset` InSpec audit resource to test the ZFS datasets on FreeBSD
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.16.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `zfs_dataset` resource block declares the ZFS dataset properties that should be tested:
@@ -9,6 +9,16 @@ Use the `zfs_pool` InSpec audit resource to test the ZFS pools on FreeBSD system
9
9
 
10
10
  <br>
11
11
 
12
+ ## Availability
13
+
14
+ ### Installation
15
+
16
+ This resource is distributed along with InSpec itself. You can use it automatically.
17
+
18
+ ### Version
19
+
20
+ This resource first became available in v1.16.0 of InSpec.
21
+
12
22
  ## Syntax
13
23
 
14
24
  A `zfs_pool` resource block declares the ZFS pool properties that should be tested: