require 'spec_helper' include Serverspec::RedHatHelper describe commands.check_enabled('httpd') do it { should eq 'chkconfig --list httpd | grep 3:on' } end describe commands.check_file('/etc/passwd') do it { should eq 'test -f /etc/passwd' } end describe commands.check_directory('/var/log') do it { should eq 'test -d /var/log' } end describe commands.check_user('root') do it { should eq 'id root' } end describe commands.check_group('wheel') do it { should eq 'getent group | grep -wq wheel' } end describe commands.check_installed('httpd') do it { should eq 'rpm -q httpd' } end describe commands.check_listening(80) do it { should eq "netstat -tunl | grep ':80 '" } end describe commands.check_running('httpd') do it { should eq 'service httpd status' } end describe commands.check_process('httpd') do it { should eq 'ps aux | grep -qw httpd' } end describe commands.check_file_contain('/etc/passwd', 'root') do it { should eq "grep -q 'root' /etc/passwd" } end describe commands.check_file_contain_within('Gemfile', 'rspec') do it { should eq "sed -n '1,$p' Gemfile | grep -q 'rspec' -" } end describe commands.check_file_contain_within('Gemfile', 'rspec', '/^group :test do/') do it { should eq "sed -n '/^group :test do/,$p' Gemfile | grep -q 'rspec' -" } end describe commands.check_file_contain_within('Gemfile', 'rspec', nil, '/^end/') do it { should eq "sed -n '1,/^end/p' Gemfile | grep -q 'rspec' -" } end describe commands.check_file_contain_within('Gemfile', 'rspec', '/^group :test do/', '/^end/') do it { should eq "sed -n '/^group :test do/,/^end/p' Gemfile | grep -q 'rspec' -" } end describe commands.check_mode('/etc/sudoers', 440) do it { should eq 'stat -c %a /etc/sudoers | grep 440' } end describe commands.check_owner('/etc/passwd', 'root') do it { should eq 'stat -c %U /etc/passwd | grep root' } end describe commands.check_grouped('/etc/passwd', 'wheel') do it { should eq 'stat -c %G /etc/passwd | grep wheel' } end describe commands.check_cron_entry('root', '* * * * * /usr/local/bin/batch.sh') do it { should eq 'crontab -u root -l | grep "\* \* \* \* \* /usr/local/bin/batch.sh"' } end describe commands.check_link('/etc/system-release', '/etc/redhat-release') do it { should eq 'stat -c %N /etc/system-release | grep /etc/redhat-release' } end describe commands.check_installed_by_gem('jekyll') do it { should eq 'gem list --local | grep jekyll' } end describe commands.check_belonging_group('root', 'wheel') do it { should eq "id root | awk '{print $2}' | grep wheel" } end describe commands.check_iptables_rule('-P INPUT ACCEPT') do it { should eq "iptables -S | grep '\\-P INPUT ACCEPT'" } end describe commands.check_iptables_rule('-P INPUT ACCEPT', 'mangle', 'INPUT') do it { should eq "iptables -t mangle -S INPUT | grep '\\-P INPUT ACCEPT'" } end