require 'spec_helper' include Serverspec::GentooHelper describe commands.check_enabled('httpd') do it { should eq "/sbin/rc-update show | grep '^\\s*httpd\\s*|\\s*\\(boot\\|default\\)'" } end describe commands.check_file('/etc/passwd') do it { should eq 'test -f /etc/passwd' } end describe commands.check_directory('/var/log') do it { should eq 'test -d /var/log' } end describe commands.check_user('root') do it { should eq 'id root' } end describe commands.check_group('wheel') do it { should eq 'getent group | grep -wq wheel' } end describe commands.check_installed('httpd') do it { should eq '/usr/bin/eix httpd --installed' } end describe commands.check_listening(80) do it { should eq "netstat -tunl | grep ':80 '" } end describe commands.check_running('httpd') do it { should eq 'service httpd status' } end describe commands.check_process('httpd') do it { should eq 'ps -e | grep -qw httpd' } end describe commands.check_file_contain('/etc/passwd', 'root') do it { should eq "grep -q 'root' /etc/passwd" } end describe commands.check_mode('/etc/sudoers', 440) do it { should eq 'stat -c %a /etc/sudoers | grep 440' } end describe commands.check_owner('/etc/passwd', 'root') do it { should eq 'stat -c %U /etc/passwd | grep root' } end describe commands.check_grouped('/etc/passwd', 'wheel') do it { should eq 'stat -c %G /etc/passwd | grep wheel' } end describe commands.check_cron_entry('root', '* * * * * /usr/local/bin/batch.sh') do it { should eq 'crontab -u root -l | grep "\* \* \* \* \* /usr/local/bin/batch.sh"' } end describe commands.check_link('/etc/system-release', '/etc/redhat-release') do it { should eq 'stat -c %N /etc/system-release | grep /etc/redhat-release' } end describe commands.check_installed_by_gem('jekyll') do it { should eq 'gem list --local | grep jekyll' } end describe commands.check_belonging_group('root', 'wheel') do it { should eq "id root | awk '{print $2}' | grep wheel" } end describe commands.check_iptables_rule('-P INPUT ACCEPT') do it { should eq "iptables -S | grep '\\-P INPUT ACCEPT'" } end describe commands.check_iptables_rule('-P INPUT ACCEPT', 'mangle', 'INPUT') do it { should eq "iptables -t mangle -S INPUT | grep '\\-P INPUT ACCEPT'" } end