scaptimony 0.1.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (61) hide show
  1. checksums.yaml +7 -0
  2. data/COPYING +674 -0
  3. data/README.md +59 -0
  4. data/Rakefile +40 -0
  5. data/app/assets/javascripts/scaptimony/application.js +15 -0
  6. data/app/assets/stylesheets/scaptimony/application.css +13 -0
  7. data/app/controllers/scaptimony/application_controller.rb +4 -0
  8. data/app/helpers/scaptimony/application_helper.rb +4 -0
  9. data/app/models/scaptimony/arf_report.rb +38 -0
  10. data/app/models/scaptimony/asset.rb +4 -0
  11. data/app/models/scaptimony/policy.rb +4 -0
  12. data/app/views/layouts/scaptimony/application.html.erb +14 -0
  13. data/config/routes.rb +2 -0
  14. data/db/migrate/20141013172051_create_scaptimony_policies.rb +9 -0
  15. data/db/migrate/20141014105333_create_scaptimony_assets.rb +10 -0
  16. data/db/migrate/20141015092642_create_scaptimony_arf_reports.rb +13 -0
  17. data/db/migrate/20141015115511_add_arf_report_unique_constraint.rb +6 -0
  18. data/lib/scaptimony.rb +4 -0
  19. data/lib/scaptimony/arf_reports_helper.rb +24 -0
  20. data/lib/scaptimony/engine.rb +5 -0
  21. data/lib/scaptimony/version.rb +3 -0
  22. data/lib/tasks/scaptimony_tasks.rake +4 -0
  23. data/test/dummy/README.rdoc +261 -0
  24. data/test/dummy/Rakefile +7 -0
  25. data/test/dummy/app/assets/javascripts/application.js +15 -0
  26. data/test/dummy/app/assets/stylesheets/application.css +13 -0
  27. data/test/dummy/app/controllers/application_controller.rb +3 -0
  28. data/test/dummy/app/helpers/application_helper.rb +2 -0
  29. data/test/dummy/app/views/layouts/application.html.erb +14 -0
  30. data/test/dummy/config.ru +4 -0
  31. data/test/dummy/config/application.rb +59 -0
  32. data/test/dummy/config/boot.rb +10 -0
  33. data/test/dummy/config/database.yml +25 -0
  34. data/test/dummy/config/environment.rb +5 -0
  35. data/test/dummy/config/environments/development.rb +37 -0
  36. data/test/dummy/config/environments/production.rb +67 -0
  37. data/test/dummy/config/environments/test.rb +37 -0
  38. data/test/dummy/config/initializers/backtrace_silencers.rb +7 -0
  39. data/test/dummy/config/initializers/inflections.rb +15 -0
  40. data/test/dummy/config/initializers/mime_types.rb +5 -0
  41. data/test/dummy/config/initializers/secret_token.rb +7 -0
  42. data/test/dummy/config/initializers/session_store.rb +8 -0
  43. data/test/dummy/config/initializers/wrap_parameters.rb +14 -0
  44. data/test/dummy/config/locales/en.yml +5 -0
  45. data/test/dummy/config/routes.rb +4 -0
  46. data/test/dummy/public/404.html +26 -0
  47. data/test/dummy/public/422.html +26 -0
  48. data/test/dummy/public/500.html +25 -0
  49. data/test/dummy/public/favicon.ico +0 -0
  50. data/test/dummy/script/rails +6 -0
  51. data/test/fixtures/scaptimony/arf_reports.yml +13 -0
  52. data/test/fixtures/scaptimony/assets.yml +7 -0
  53. data/test/fixtures/scaptimony/policies.yml +7 -0
  54. data/test/integration/navigation_test.rb +10 -0
  55. data/test/lib/scaptimony/arf_reports_helper_test.rb +6 -0
  56. data/test/models/scaptimony/arf_report_test.rb +9 -0
  57. data/test/models/scaptimony/asset_test.rb +9 -0
  58. data/test/models/scaptimony/policy_test.rb +9 -0
  59. data/test/scaptimony_test.rb +7 -0
  60. data/test/test_helper.rb +15 -0
  61. metadata +172 -0
data/README.md ADDED
@@ -0,0 +1,59 @@
1
+ # SCAPtimony
2
+
3
+ SCAPtimony is SCAP storage and database server build on top of OpenSCAP library.
4
+ SCAPtimony can be deployed as a part of your Rails application (i.e. Foreman) or
5
+ as a stand-alone sealed server.
6
+
7
+ + Current features:
8
+ + Collect & achieve OpenSCAP audit results from your infrastructure
9
+ + Future features:
10
+ + Rails artefacts to display audit results within your application
11
+ + API to set-up organization defined targeting (connect set of system, a policy and time schedule)
12
+ + Comparison of audit results
13
+ + Waive known issues (one-time waivers, re-occurring, waivers)
14
+
15
+ ## Installation
16
+
17
+ - Get SCAPtimony sources
18
+
19
+ ```
20
+ $ git clone https://github.com/OpenSCAP/scaptimony.git
21
+ ```
22
+
23
+ - Build SCAPtimony RPM (instructions for Red Hat Enterprise Linux 6)
24
+
25
+ ```
26
+ $ cd scaptimony
27
+ $ gem build scaptimony.gemspec
28
+ # yum install yum-utils rpm-build scl-utils scl-utils-build ruby193-rubygems-devel
29
+ # yum-builddep extra/rubygem-scaptimony.spec
30
+ $ rpmbuild --define "_sourcedir `pwd`" --define "scl ruby193" -ba extra/rubygem-scaptimony.spec
31
+ ```
32
+
33
+ - Install SCAPtimony RPM
34
+
35
+ ```
36
+ # yum local install ~/rpmbuild/RPMS/noarch/ruby193-rubygem-scaptimony-*.noarch.rpm
37
+ ```
38
+
39
+ ## Usage
40
+
41
+ Users are currently adviced to use SCAPtimony only through
42
+ [foreman_openscap](https://github.com/OpenSCAP/foreman_openscap).
43
+
44
+ ## Copyright
45
+
46
+ Copyright (c) 2014 Red Hat, Inc.
47
+
48
+ This program is free software: you can redistribute it and/or modify
49
+ it under the terms of the GNU General Public License as published by
50
+ the Free Software Foundation, either version 3 of the License, or
51
+ (at your option) any later version.
52
+
53
+ This program is distributed in the hope that it will be useful,
54
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
55
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
56
+ GNU General Public License for more details.
57
+
58
+ You should have received a copy of the GNU General Public License
59
+ along with this program. If not, see <http://www.gnu.org/licenses/>.
data/Rakefile ADDED
@@ -0,0 +1,40 @@
1
+ #!/usr/bin/env rake
2
+ begin
3
+ require 'bundler/setup'
4
+ rescue LoadError
5
+ puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
6
+ end
7
+ begin
8
+ require 'rdoc/task'
9
+ rescue LoadError
10
+ require 'rdoc/rdoc'
11
+ require 'rake/rdoctask'
12
+ RDoc::Task = Rake::RDocTask
13
+ end
14
+
15
+ RDoc::Task.new(:rdoc) do |rdoc|
16
+ rdoc.rdoc_dir = 'rdoc'
17
+ rdoc.title = 'SCAPtimony'
18
+ rdoc.options << '--line-numbers'
19
+ rdoc.rdoc_files.include('README.md')
20
+ rdoc.rdoc_files.include('lib/**/*.rb')
21
+ end
22
+
23
+ APP_RAKEFILE = File.expand_path("../test/dummy/Rakefile", __FILE__)
24
+ load 'rails/tasks/engine.rake'
25
+
26
+
27
+
28
+ Bundler::GemHelper.install_tasks
29
+
30
+ require 'rake/testtask'
31
+
32
+ Rake::TestTask.new(:test) do |t|
33
+ t.libs << 'lib'
34
+ t.libs << 'test'
35
+ t.pattern = 'test/**/*_test.rb'
36
+ t.verbose = false
37
+ end
38
+
39
+
40
+ task :default => :test
@@ -0,0 +1,15 @@
1
+ // This is a manifest file that'll be compiled into application.js, which will include all the files
2
+ // listed below.
3
+ //
4
+ // Any JavaScript/Coffee file within this directory, lib/assets/javascripts, vendor/assets/javascripts,
5
+ // or vendor/assets/javascripts of plugins, if any, can be referenced here using a relative path.
6
+ //
7
+ // It's not advisable to add code directly here, but if you do, it'll appear at the bottom of the
8
+ // the compiled file.
9
+ //
10
+ // WARNING: THE FIRST BLANK LINE MARKS THE END OF WHAT'S TO BE PROCESSED, ANY BLANK LINE SHOULD
11
+ // GO AFTER THE REQUIRES BELOW.
12
+ //
13
+ //= require jquery
14
+ //= require jquery_ujs
15
+ //= require_tree .
@@ -0,0 +1,13 @@
1
+ /*
2
+ * This is a manifest file that'll be compiled into application.css, which will include all the files
3
+ * listed below.
4
+ *
5
+ * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
6
+ * or vendor/assets/stylesheets of plugins, if any, can be referenced here using a relative path.
7
+ *
8
+ * You're free to add application-wide styles to this file and they'll appear at the top of the
9
+ * compiled file, but it's generally better to create a new file per style scope.
10
+ *
11
+ *= require_self
12
+ *= require_tree .
13
+ */
@@ -0,0 +1,4 @@
1
+ module Scaptimony
2
+ class ApplicationController < ActionController::Base
3
+ end
4
+ end
@@ -0,0 +1,4 @@
1
+ module Scaptimony
2
+ module ApplicationHelper
3
+ end
4
+ end
@@ -0,0 +1,38 @@
1
+ require 'fileutils'
2
+ require 'openscap'
3
+ require 'openscap/ds/arf'
4
+
5
+ module Scaptimony
6
+ class ArfReport < ActiveRecord::Base
7
+ belongs_to :asset
8
+ belongs_to :policy
9
+
10
+ def store!(data)
11
+ begin
12
+ FileUtils.mkdir_p dir
13
+ File.open(path, 'wb') { |f| f.write(data) }
14
+ rescue StandardError => e
15
+ logger.error "Could not store ARF to '#{path}': #{e.message}"
16
+ raise e
17
+ end
18
+ end
19
+
20
+ def each
21
+ OpenSCAP.oscap_init
22
+ arf = OpenSCAP::DS::Arf.new path
23
+ yield arf.html
24
+ arf.destroy
25
+ OpenSCAP.oscap_cleanup
26
+ end
27
+
28
+ private
29
+ def path
30
+ "#{dir}/#{digest}.xml.bz2"
31
+ end
32
+
33
+ def dir
34
+ # TODO this should be configurable
35
+ "/var/lib/foreman/scaptimony/arf/#{asset.name}/#{policy.name}/#{date}"
36
+ end
37
+ end
38
+ end
@@ -0,0 +1,4 @@
1
+ module Scaptimony
2
+ class Asset < ActiveRecord::Base
3
+ end
4
+ end
@@ -0,0 +1,4 @@
1
+ module Scaptimony
2
+ class Policy < ActiveRecord::Base
3
+ end
4
+ end
@@ -0,0 +1,14 @@
1
+ <!DOCTYPE html>
2
+ <html>
3
+ <head>
4
+ <title>SCAPtimony</title>
5
+ <%= stylesheet_link_tag "scaptimony/application", :media => "all" %>
6
+ <%= javascript_include_tag "scaptimony/application" %>
7
+ <%= csrf_meta_tags %>
8
+ </head>
9
+ <body>
10
+
11
+ <%= yield %>
12
+
13
+ </body>
14
+ </html>
data/config/routes.rb ADDED
@@ -0,0 +1,2 @@
1
+ Scaptimony::Engine.routes.draw do
2
+ end
@@ -0,0 +1,9 @@
1
+ class CreateScaptimonyPolicies < ActiveRecord::Migration
2
+ def change
3
+ create_table :scaptimony_policies do |t|
4
+ t.string :name, limit: 80
5
+
6
+ t.timestamps
7
+ end
8
+ end
9
+ end
@@ -0,0 +1,10 @@
1
+ class CreateScaptimonyAssets < ActiveRecord::Migration
2
+ def change
3
+ create_table :scaptimony_assets do |t|
4
+ t.string :name, limit: 255
5
+
6
+ t.timestamps
7
+ end
8
+ add_index :scaptimony_assets, :name, unique: true
9
+ end
10
+ end
@@ -0,0 +1,13 @@
1
+ class CreateScaptimonyArfReports < ActiveRecord::Migration
2
+ def change
3
+ create_table :scaptimony_arf_reports do |t|
4
+ t.references :asset, index: true
5
+ t.references :policy, index: true
6
+ t.datetime :date
7
+ t.string :digest, limit: 128
8
+
9
+ t.timestamps
10
+ end
11
+ add_index :scaptimony_arf_reports, :digest, unique: true
12
+ end
13
+ end
@@ -0,0 +1,6 @@
1
+ class AddArfReportUniqueConstraint < ActiveRecord::Migration
2
+ def change
3
+ add_index :scaptimony_arf_reports, [:asset_id, :policy_id, :date, :digest],
4
+ :unique => true, :name => :index_scaptimony_arf_reports_unique_set
5
+ end
6
+ end
data/lib/scaptimony.rb ADDED
@@ -0,0 +1,4 @@
1
+ require "scaptimony/engine"
2
+
3
+ module Scaptimony
4
+ end
@@ -0,0 +1,24 @@
1
+ #
2
+ # Copyright (c) 2014 Red Hat Inc.
3
+ #
4
+ # This software is licensed to you under the GNU General Public License,
5
+ # version 3 (GPLv3). There is NO WARRANTY for this software, express or
6
+ # implied, including the implied warranties of MERCHANTABILITY or FITNESS
7
+ # FOR A PARTICULAR PURPOSE. You should have received a copy of GPLv3
8
+ # along with this software; if not, see http://www.gnu.org/licenses/gpl.txt
9
+ #
10
+
11
+ require 'digest'
12
+
13
+ module Scaptimony
14
+ module ArfReportsHelper
15
+ def self.create_arf(asset, params, arf_bzip)
16
+ # TODO:RAILS-4.0: This should become policy = Policy.find_or_create_by!(name: params[:policy])
17
+ policy = Policy.first_or_create!(:name => params[:policy])
18
+ digest = Digest::SHA256.hexdigest arf_bzip
19
+ # TODO:RAILS-4.0: This should become arf_report = ArfReport.find_or_create_by! ...
20
+ arf_report = ArfReport.where(:asset_id => asset.id, :policy_id => policy.id, :date => params[:date], :digest => digest).first_or_create!
21
+ arf_report.store!(arf_bzip)
22
+ end
23
+ end
24
+ end
@@ -0,0 +1,5 @@
1
+ module Scaptimony
2
+ class Engine < ::Rails::Engine
3
+ isolate_namespace Scaptimony
4
+ end
5
+ end
@@ -0,0 +1,3 @@
1
+ module Scaptimony
2
+ VERSION = "0.1.0"
3
+ end
@@ -0,0 +1,4 @@
1
+ # desc "Explaining what the task does"
2
+ # task :scaptimony do
3
+ # # Task goes here
4
+ # end
@@ -0,0 +1,261 @@
1
+ == Welcome to Rails
2
+
3
+ Rails is a web-application framework that includes everything needed to create
4
+ database-backed web applications according to the Model-View-Control pattern.
5
+
6
+ This pattern splits the view (also called the presentation) into "dumb"
7
+ templates that are primarily responsible for inserting pre-built data in between
8
+ HTML tags. The model contains the "smart" domain objects (such as Account,
9
+ Product, Person, Post) that holds all the business logic and knows how to
10
+ persist themselves to a database. The controller handles the incoming requests
11
+ (such as Save New Account, Update Product, Show Post) by manipulating the model
12
+ and directing data to the view.
13
+
14
+ In Rails, the model is handled by what's called an object-relational mapping
15
+ layer entitled Active Record. This layer allows you to present the data from
16
+ database rows as objects and embellish these data objects with business logic
17
+ methods. You can read more about Active Record in
18
+ link:files/vendor/rails/activerecord/README.html.
19
+
20
+ The controller and view are handled by the Action Pack, which handles both
21
+ layers by its two parts: Action View and Action Controller. These two layers
22
+ are bundled in a single package due to their heavy interdependence. This is
23
+ unlike the relationship between the Active Record and Action Pack that is much
24
+ more separate. Each of these packages can be used independently outside of
25
+ Rails. You can read more about Action Pack in
26
+ link:files/vendor/rails/actionpack/README.html.
27
+
28
+
29
+ == Getting Started
30
+
31
+ 1. At the command prompt, create a new Rails application:
32
+ <tt>rails new myapp</tt> (where <tt>myapp</tt> is the application name)
33
+
34
+ 2. Change directory to <tt>myapp</tt> and start the web server:
35
+ <tt>cd myapp; rails server</tt> (run with --help for options)
36
+
37
+ 3. Go to http://localhost:3000/ and you'll see:
38
+ "Welcome aboard: You're riding Ruby on Rails!"
39
+
40
+ 4. Follow the guidelines to start developing your application. You can find
41
+ the following resources handy:
42
+
43
+ * The Getting Started Guide: http://guides.rubyonrails.org/getting_started.html
44
+ * Ruby on Rails Tutorial Book: http://www.railstutorial.org/
45
+
46
+
47
+ == Debugging Rails
48
+
49
+ Sometimes your application goes wrong. Fortunately there are a lot of tools that
50
+ will help you debug it and get it back on the rails.
51
+
52
+ First area to check is the application log files. Have "tail -f" commands
53
+ running on the server.log and development.log. Rails will automatically display
54
+ debugging and runtime information to these files. Debugging info will also be
55
+ shown in the browser on requests from 127.0.0.1.
56
+
57
+ You can also log your own messages directly into the log file from your code
58
+ using the Ruby logger class from inside your controllers. Example:
59
+
60
+ class WeblogController < ActionController::Base
61
+ def destroy
62
+ @weblog = Weblog.find(params[:id])
63
+ @weblog.destroy
64
+ logger.info("#{Time.now} Destroyed Weblog ID ##{@weblog.id}!")
65
+ end
66
+ end
67
+
68
+ The result will be a message in your log file along the lines of:
69
+
70
+ Mon Oct 08 14:22:29 +1000 2007 Destroyed Weblog ID #1!
71
+
72
+ More information on how to use the logger is at http://www.ruby-doc.org/core/
73
+
74
+ Also, Ruby documentation can be found at http://www.ruby-lang.org/. There are
75
+ several books available online as well:
76
+
77
+ * Programming Ruby: http://www.ruby-doc.org/docs/ProgrammingRuby/ (Pickaxe)
78
+ * Learn to Program: http://pine.fm/LearnToProgram/ (a beginners guide)
79
+
80
+ These two books will bring you up to speed on the Ruby language and also on
81
+ programming in general.
82
+
83
+
84
+ == Debugger
85
+
86
+ Debugger support is available through the debugger command when you start your
87
+ Mongrel or WEBrick server with --debugger. This means that you can break out of
88
+ execution at any point in the code, investigate and change the model, and then,
89
+ resume execution! You need to install ruby-debug to run the server in debugging
90
+ mode. With gems, use <tt>sudo gem install ruby-debug</tt>. Example:
91
+
92
+ class WeblogController < ActionController::Base
93
+ def index
94
+ @posts = Post.all
95
+ debugger
96
+ end
97
+ end
98
+
99
+ So the controller will accept the action, run the first line, then present you
100
+ with a IRB prompt in the server window. Here you can do things like:
101
+
102
+ >> @posts.inspect
103
+ => "[#<Post:0x14a6be8
104
+ @attributes={"title"=>nil, "body"=>nil, "id"=>"1"}>,
105
+ #<Post:0x14a6620
106
+ @attributes={"title"=>"Rails", "body"=>"Only ten..", "id"=>"2"}>]"
107
+ >> @posts.first.title = "hello from a debugger"
108
+ => "hello from a debugger"
109
+
110
+ ...and even better, you can examine how your runtime objects actually work:
111
+
112
+ >> f = @posts.first
113
+ => #<Post:0x13630c4 @attributes={"title"=>nil, "body"=>nil, "id"=>"1"}>
114
+ >> f.
115
+ Display all 152 possibilities? (y or n)
116
+
117
+ Finally, when you're ready to resume execution, you can enter "cont".
118
+
119
+
120
+ == Console
121
+
122
+ The console is a Ruby shell, which allows you to interact with your
123
+ application's domain model. Here you'll have all parts of the application
124
+ configured, just like it is when the application is running. You can inspect
125
+ domain models, change values, and save to the database. Starting the script
126
+ without arguments will launch it in the development environment.
127
+
128
+ To start the console, run <tt>rails console</tt> from the application
129
+ directory.
130
+
131
+ Options:
132
+
133
+ * Passing the <tt>-s, --sandbox</tt> argument will rollback any modifications
134
+ made to the database.
135
+ * Passing an environment name as an argument will load the corresponding
136
+ environment. Example: <tt>rails console production</tt>.
137
+
138
+ To reload your controllers and models after launching the console run
139
+ <tt>reload!</tt>
140
+
141
+ More information about irb can be found at:
142
+ link:http://www.rubycentral.org/pickaxe/irb.html
143
+
144
+
145
+ == dbconsole
146
+
147
+ You can go to the command line of your database directly through <tt>rails
148
+ dbconsole</tt>. You would be connected to the database with the credentials
149
+ defined in database.yml. Starting the script without arguments will connect you
150
+ to the development database. Passing an argument will connect you to a different
151
+ database, like <tt>rails dbconsole production</tt>. Currently works for MySQL,
152
+ PostgreSQL and SQLite 3.
153
+
154
+ == Description of Contents
155
+
156
+ The default directory structure of a generated Ruby on Rails application:
157
+
158
+ |-- app
159
+ | |-- assets
160
+ | |-- images
161
+ | |-- javascripts
162
+ | `-- stylesheets
163
+ | |-- controllers
164
+ | |-- helpers
165
+ | |-- mailers
166
+ | |-- models
167
+ | `-- views
168
+ | `-- layouts
169
+ |-- config
170
+ | |-- environments
171
+ | |-- initializers
172
+ | `-- locales
173
+ |-- db
174
+ |-- doc
175
+ |-- lib
176
+ | `-- tasks
177
+ |-- log
178
+ |-- public
179
+ |-- script
180
+ |-- test
181
+ | |-- fixtures
182
+ | |-- functional
183
+ | |-- integration
184
+ | |-- performance
185
+ | `-- unit
186
+ |-- tmp
187
+ | |-- cache
188
+ | |-- pids
189
+ | |-- sessions
190
+ | `-- sockets
191
+ `-- vendor
192
+ |-- assets
193
+ `-- stylesheets
194
+ `-- plugins
195
+
196
+ app
197
+ Holds all the code that's specific to this particular application.
198
+
199
+ app/assets
200
+ Contains subdirectories for images, stylesheets, and JavaScript files.
201
+
202
+ app/controllers
203
+ Holds controllers that should be named like weblogs_controller.rb for
204
+ automated URL mapping. All controllers should descend from
205
+ ApplicationController which itself descends from ActionController::Base.
206
+
207
+ app/models
208
+ Holds models that should be named like post.rb. Models descend from
209
+ ActiveRecord::Base by default.
210
+
211
+ app/views
212
+ Holds the template files for the view that should be named like
213
+ weblogs/index.html.erb for the WeblogsController#index action. All views use
214
+ eRuby syntax by default.
215
+
216
+ app/views/layouts
217
+ Holds the template files for layouts to be used with views. This models the
218
+ common header/footer method of wrapping views. In your views, define a layout
219
+ using the <tt>layout :default</tt> and create a file named default.html.erb.
220
+ Inside default.html.erb, call <% yield %> to render the view using this
221
+ layout.
222
+
223
+ app/helpers
224
+ Holds view helpers that should be named like weblogs_helper.rb. These are
225
+ generated for you automatically when using generators for controllers.
226
+ Helpers can be used to wrap functionality for your views into methods.
227
+
228
+ config
229
+ Configuration files for the Rails environment, the routing map, the database,
230
+ and other dependencies.
231
+
232
+ db
233
+ Contains the database schema in schema.rb. db/migrate contains all the
234
+ sequence of Migrations for your schema.
235
+
236
+ doc
237
+ This directory is where your application documentation will be stored when
238
+ generated using <tt>rake doc:app</tt>
239
+
240
+ lib
241
+ Application specific libraries. Basically, any kind of custom code that
242
+ doesn't belong under controllers, models, or helpers. This directory is in
243
+ the load path.
244
+
245
+ public
246
+ The directory available for the web server. Also contains the dispatchers and the
247
+ default HTML files. This should be set as the DOCUMENT_ROOT of your web
248
+ server.
249
+
250
+ script
251
+ Helper scripts for automation and generation.
252
+
253
+ test
254
+ Unit and functional tests along with fixtures. When using the rails generate
255
+ command, template test files will be generated for you and placed in this
256
+ directory.
257
+
258
+ vendor
259
+ External libraries that the application depends on. Also includes the plugins
260
+ subdirectory. If the app has frozen rails, those gems also go here, under
261
+ vendor/rails/. This directory is in the load path.