serverspec-cem-acpt 2.42.0

data/spec/type/redhat/package_spec.rb

@@ -0,0 +1,23 @@
+require 'spec_helper'
+
+set :os, :family => 'redhat'
+
+describe package('httpd') do
+  it { should be_installed }
+end
+
+describe package('httpd') do
+  it { should be_installed.with_version('2.2.15-28.el6') }
+end
+
+describe package('httpd') do
+  it { should be_installed.by('rpm').with_version('2.2.15-28.el6') }
+end
+
+describe package('httpd') do
+  let(:stdout) { "2.2.15\n" }
+  its(:version) { should eq '2.2.15' }
+  its(:version) { should > '2.2.14' }
+  its(:version) { should < '2.2.16' }
+  its(:version) { should > '2.2.9' }
+end

data/spec/type/redhat/service_spec.rb

@@ -0,0 +1,11 @@
+require 'spec_helper'
+
+set :os, :family => 'redhat'
+
+describe service('sshd') do
+  it { should be_enabled }
+end
+
+describe service('sshd') do
+  it { should be_enabled.with_level(4) }
+end

data/spec/type/redhat/yumrepo_spec.rb

@@ -0,0 +1,11 @@
+require 'spec_helper'
+
+set :os, :family => 'redhat'
+
+describe yumrepo('epel') do
+  it { should exist }
+end
+
+describe yumrepo('epel') do
+  it { should be_enabled }
+end

data/spec/type/redhat5/iptables_spec.rb

@@ -0,0 +1,11 @@
+require 'spec_helper'
+
+set :os, :family => 'redhat', :release => 5
+
+describe iptables do
+  it { should have_rule '-P INPUT ACCEPT' }
+end
+
+describe iptables do
+  it { should have_rule('-P INPUT ACCEPT').with_table('mangle').with_chain('INPUT') }
+end

data/spec/type/redhat7/service_spec.rb

@@ -0,0 +1,9 @@
+require 'spec_helper'
+
+set :os, :family => 'redhat', :release => 7
+
+describe service('sshd') do
+  it { should be_enabled }
+  it { should be_running }
+end
+

data/spec/type/smartos/package_spec.rb

@@ -0,0 +1,19 @@
+require 'spec_helper'
+
+set :os, :family => 'smartos'
+
+describe package('httpd') do
+  it { should be_installed }
+end
+
+describe package('httpd') do
+  it { should be_installed.with_version('2.2.15-28.el6') }
+end
+
+describe package('httpd') do
+  let(:stdout) { "2.2.15\n" }
+  its(:version) { should eq '2.2.15' }
+  its(:version) { should > '2.2.14' }
+  its(:version) { should < '2.2.16' }
+  its(:version) { should > '2.2.9' }
+end

data/spec/type/smartos/service_spec.rb

@@ -0,0 +1,16 @@
+require 'spec_helper'
+
+set :os, :family => 'smartos'
+
+describe service('sshd') do
+  it { should be_enabled }
+end
+
+describe service('sshd') do
+  it { should be_running }
+end
+
+describe service('sshd') do
+  it { should have_property :foo => 'bar' }
+end
+

data/spec/type/solaris/cron_spec.rb

@@ -0,0 +1,11 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris'
+
+describe cron do
+  it { should have_entry '* * * * * /usr/local/bin/batch.sh' }
+end
+
+describe cron do
+  it { should have_entry('* * * * * /usr/local/bin/batch.sh').with_user('root') }
+end

data/spec/type/solaris/file_spec.rb

@@ -0,0 +1,15 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris'
+
+describe file('/tmp') do
+  it { should be_readable.by_user('mail') }
+end
+
+describe file('/tmp') do
+  it { should be_writable.by_user('mail') }
+end
+
+describe file('/tmp') do
+  it { should be_executable.by_user('mail') }
+end

data/spec/type/solaris/group_spec.rb

@@ -0,0 +1,7 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris'
+
+describe group('root') do
+  it { should have_gid 0 }
+end

data/spec/type/solaris/host_spec.rb

@@ -0,0 +1,19 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris'
+
+describe host('127.0.0.1') do
+  it { should be_reachable }
+end
+
+describe host('127.0.0.1') do
+  it { should be_reachable.with(:proto => 'icmp', :timeout=> 1) }
+end
+
+describe host('127.0.0.1') do
+  it { should be_reachable.with(:proto => 'tcp', :port => 22, :timeout=> 1) }
+end
+
+describe host('127.0.0.1') do
+  it { should be_reachable.with(:proto => 'udp', :port => 53, :timeout=> 1) }
+end

data/spec/type/solaris/ipfilter_spec.rb

@@ -0,0 +1,7 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris'
+
+describe ipfilter do
+  it { should have_rule 'pass in quick on lo0 all' }
+end

data/spec/type/solaris/ipnat_spec.rb

@@ -0,0 +1,7 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris'
+
+describe ipnat do
+  it { should have_rule 'map net1 192.168.0.0/24 -> 0.0.0.0/32' }
+end

data/spec/type/solaris/package_spec.rb

@@ -0,0 +1,7 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris'
+
+describe package('httpd') do
+  it { should be_installed }
+end

data/spec/type/solaris/port_spec.rb

@@ -0,0 +1,34 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris'
+
+describe port(80) do
+  it { should be_listening }
+end
+
+describe port(80) do
+  it { should be_listening.with('tcp') }
+end
+
+describe port(80) do
+  it  do
+    expect {
+      should be_listening.with('not implemented')
+    }.to raise_error(ArgumentError, %r/\A`be_listening` matcher doesn\'t support/)
+  end
+end
+
+describe port(80) do
+  it { should be_listening.on('127.0.0.1') }
+end
+
+describe port(80) do
+  it do
+    expect{ should be_listening.on('') }.to raise_error(ArgumentError)
+  end
+end
+
+describe port(123) do
+  it { should be_listening.with('udp') }
+end
+

data/spec/type/solaris/service_spec.rb

@@ -0,0 +1,16 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris'
+
+describe service('sshd') do
+  it { should be_enabled }
+end
+
+describe service('sshd') do
+  it { should be_running }
+end
+
+describe service('sshd') do
+  it { should have_property :foo => 'bar' }
+end
+

data/spec/type/solaris/user_spec.rb

@@ -0,0 +1,16 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris'
+
+describe user('root') do
+  it { should belong_to_group 'root' }
+end
+
+describe user('root') do
+  it { should have_login_shell '/bin/bash' }
+end
+
+describe user('root') do
+  it { should have_home_directory '/root' }
+end
+

data/spec/type/solaris/zfs_spec.rb

@@ -0,0 +1,15 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris'
+
+describe zfs('rpool') do
+  it { should exist }
+end
+
+describe zfs('rpool') do
+  it { should have_property 'mountpoint' => '/rpool'  }
+end
+
+describe zfs('rpool') do
+  it { should have_property 'mountpoint' => '/rpool', 'compression' => 'off' }
+end

data/spec/type/solaris10/file_spec.rb

@@ -0,0 +1,313 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris', :release => 10
+
+describe file('/etc/ssh/sshd_config') do
+  it { should be_file }
+end
+
+describe file('/etc/ssh') do
+  it { should be_directory }
+end
+
+describe file('/var/run/unicorn.sock') do
+  it { should be_socket }
+end
+
+describe file('/etc/ssh/sshd_config') do
+  it { should contain 'This is the sshd server system-wide configuration file' }
+end
+
+describe file('/etc/ssh/sshd_config') do
+  it { should contain /^This is the sshd server system-wide configuration file/ }
+end
+
+describe file('Gemfile') do
+  it { should contain('rspec').from(/^group :test do/).to(/^end/) }
+end
+
+describe file('Gemfile') do
+  it { should contain('rspec').after(/^group :test do/) }
+end
+
+describe file('Gemfile') do
+  it { should contain('rspec').before(/^end/) }
+end
+
+describe file('/etc/passwd') do
+  it { should be_mode 644 }
+end
+
+describe file('/etc/passwd') do
+  it { should be_owned_by 'root' }
+end
+
+describe file('/etc/passwd') do
+  it { should be_grouped_into 'root' }
+end
+
+describe file('/etc/pam.d/system-auth') do
+  it { should be_linked_to '/etc/pam.d/system-auth-ac' }
+end
+
+describe file('/dev') do
+  let(:stdout) { "755\r\n" }
+  it { should be_readable }
+end
+
+describe file('/dev') do
+  let(:stdout) { "333\r\n" }
+  it { should_not be_readable }
+end
+
+describe file('/dev') do
+  let(:stdout) { "400\r\n" }
+  it { should be_readable.by('owner') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "044\r\n" }
+  it { should_not be_readable.by('owner') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "040\r\n" }
+  it { should be_readable.by('group') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "404\r\n" }
+  it { should_not be_readable.by('group') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "044\r\n" }
+  it { should be_readable.by('others') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "443\r\n" }
+  it { should_not be_readable.by('others') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "755\r\n" }
+  it { should be_writable }
+end
+
+describe file('/dev') do
+  let(:stdout) { "555\r\n" }
+  it { should_not be_writable }
+end
+
+describe file('/dev') do
+  let(:stdout) { "200\r\n" }
+  it { should be_writable.by('owner') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "555\r\n" }
+  it { should_not be_writable.by('owner') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "030\r\n" }
+  it { should be_writable.by('group') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "555\r\n" }
+  it { should_not be_writable.by('group') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "666\r\n" }
+  it { should be_writable.by('others') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "555\r\n" }
+  it { should_not be_writable.by('others') }
+end
+
+
+describe file('/dev') do
+  let(:stdout) { "755\r\n" }
+  it { should be_executable }
+end
+
+describe file('/dev') do
+  let(:stdout) { "666\r\n" }
+  it { should_not be_executable }
+end
+
+describe file('/dev') do
+  let(:stdout) { "100\r\n" }
+  it { should be_executable.by('owner') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "666\r\n" }
+  it { should_not be_executable.by('owner') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "070\r\n" }
+  it { should be_executable.by('group') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "666\r\n" }
+  it { should_not be_executable.by('group') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "001\r\n" }
+  it { should be_executable.by('others') }
+end
+
+describe file('/dev') do
+  let(:stdout) { "666\r\n" }
+  it { should_not be_executable.by('others') }
+end
+
+describe file('/') do
+  it { should be_mounted }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should be_mounted.with( :type => 'ext4' ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should be_mounted.with( :type => 'ext4', :options => { :rw => true } ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should be_mounted.with( :type => 'ext4', :options => { :mode => 620 } ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should be_mounted.with( :type => 'ext4', :device => '/dev/mapper/VolGroup-lv_root' ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should_not be_mounted.with( :type => 'xfs' ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should_not be_mounted.with( :type => 'ext4', :options => { :rw => false } ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should_not be_mounted.with( :type => 'ext4', :options => { :mode => 600 } ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should_not be_mounted.with( :type => 'xfs', :device => '/dev/mapper/VolGroup-lv_root' ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should_not be_mounted.with( :type => 'ext4', :device => '/dev/mapper/VolGroup-lv_r00t' ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it do
+    should be_mounted.only_with(
+      :device  => '/dev/mapper/VolGroup-lv_root',
+      :type    => 'ext4',
+      :options => {
+        :rw   => true,
+        :mode => 620,
+      }
+    )
+  end
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it do
+    should_not be_mounted.only_with(
+      :device  => '/dev/mapper/VolGroup-lv_root',
+      :type    => 'ext4',
+      :options => {
+        :rw   => true,
+        :mode => 620,
+        :bind => true,
+      }
+    )
+  end
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it do
+    should_not be_mounted.only_with(
+      :device  => '/dev/mapper/VolGroup-lv_root',
+      :type    => 'ext4',
+      :options => {
+        :rw   => true,
+      }
+    )
+  end
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it do
+    should_not be_mounted.only_with(
+      :device  => '/dev/mapper/VolGroup-lv_roooooooooot',
+      :type    => 'ext4',
+      :options => {
+        :rw   => true,
+        :mode => 620,
+      }
+    )
+  end
+end
+
+describe file('/etc/services') do
+  let(:stdout) { "35435ea447c19f0ea5ef971837ab9ced\n" }
+  its(:md5sum) { should eq '35435ea447c19f0ea5ef971837ab9ced' }
+end
+
+describe file('/etc/services') do
+  let(:stdout)  {"0c3feee1353a8459f8c7d84885e6bc602ef853751ffdbce3e3b6dfa1d345fc7a" }
+  its(:md5sum) { should eq '0c3feee1353a8459f8c7d84885e6bc602ef853751ffdbce3e3b6dfa1d345fc7a' }
+end
+
+describe file('/etc/passwd') do
+  let(:stdout) {<<EOF
+root:x:0:0:root:/root:/bin/bash
+bin:x:1:1:bin:/bin:/sbin/nologin
+daemon:x:2:2:daemon:/sbin:/sbin/nologin
+sync:x:5:0:sync:/sbin:/bin/sync
+shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
+halt:x:7:0:halt:/sbin:/sbin/halt
+mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
+operator:x:11:0:operator:/root:/sbin/nologin
+nobody:x:99:99:Nobody:/:/sbin/nologin
+dbus:x:81:81:System message bus:/:/sbin/nologin
+EOF
+  }
+
+  its(:content) { should match /root:x:0:0/ }
+end
+
+describe file('/etc/passwd') do
+  it 'be_immutable is not implemented in base class' do
+    expect {
+      should be_immutable
+    }.to raise_error(/is not implemented in Specinfra/)
+  end
+end

data/spec/type/solaris10/group_spec.rb

@@ -0,0 +1,8 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris', :release => 10
+
+describe group('root') do
+  it { should exist }
+end
+

data/spec/type/solaris10/host_spec.rb

@@ -0,0 +1,16 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris', :release => 10
+
+describe host('127.0.0.1') do
+  it { should be_reachable }
+end
+
+describe host('127.0.0.1') do
+  it { should be_reachable.with(:proto => 'icmp', :timeout=> 1) }
+end
+
+describe host('127.0.0.1') do
+  it { should be_reachable.with(:proto => 'tcp', :port => 22, :timeout=> 1) }
+end
+

data/spec/type/solaris10/package_spec.rb

@@ -0,0 +1,8 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris', :release => 10
+
+describe package('httpd') do
+  it { should be_installed }
+end
+

data/spec/type/solaris10/user_spec.rb

@@ -0,0 +1,8 @@
+require 'spec_helper'
+
+set :os, :family => 'solaris', :release => 10
+
+describe user('root') do
+  it { should have_authorized_key 'XXXXXXXXXXXXXXX' }
+end
+

data/spec/type/suse/package_spec.rb

@@ -0,0 +1,23 @@
+require 'spec_helper'
+
+set :os, :family => 'suse'
+
+describe package('httpd') do
+  it { should be_installed }
+end
+
+describe package('httpd') do
+  it { should be_installed.with_version('2.2.15-28.el6') }
+end
+
+describe package('httpd') do
+  it { should be_installed.by('rpm').with_version('2.2.15-28.el6') }
+end
+
+describe package('httpd') do
+  let(:stdout) { "2.2.15\n" }
+  its(:version) { should eq '2.2.15' }
+  its(:version) { should > '2.2.14' }
+  its(:version) { should < '2.2.16' }
+  its(:version) { should > '2.2.9' }
+end

data/spec/type/suse/service_spec.rb

@@ -0,0 +1,11 @@
+require 'spec_helper'
+
+set :os, :family => 'suse'
+
+describe service('sshd') do
+  it { should be_enabled }
+end
+
+describe service('sshd') do
+  it { should be_enabled.with_level(4) }
+end

data/spec/type/ubuntu/ppa_spec.rb

@@ -0,0 +1,11 @@
+require 'spec_helper'
+
+set :os, :family => 'ubuntu'
+
+describe ppa('username/ppa-name') do
+  it { should exist }
+end
+
+describe ppa('username/ppa-name') do
+  it { should be_enabled }
+end