Module: CemSpecHelper::ResourceDataSpec

Defined in:
lib/cem_spec_helper/resource_data_spec.rb

Defined Under Namespace

Classes: Resource

Constant Summary collapse

DATA_ROOT =

The root directory for all resource data fixtures

File.join(Dir.pwd, 'spec', 'fixtures', 'data')
REDHAT_FAMILY_ROOT =

The root directory for RedHat family resource data fixtures

File.join(DATA_ROOT, 'RedHat')
REDHAT_ROOT_DIR =

The root directory for RedHat resource data fixtures

File.join(REDHAT_FAMILY_ROOT, 'RedHat')
REDHAT_MAJVER =

The major versions of RedHat resource data fixtures

[7, 8, 9, 10].freeze
CENTOS_ROOT_DIR =

The root directory for CentOS resource data fixtures

File.join(REDHAT_FAMILY_ROOT, 'CentOS')
CENTOS_MAJVER =

The major versions of CentOS resource data fixtures

[7].freeze
ORACLE_ROOT_DIR =

The root directory for OracleLinux resource data fixtures

File.join(REDHAT_FAMILY_ROOT, 'OracleLinux')
ORACLE_MAJVER =

The major versions of OracleLinux resource data fixtures

[7, 8, 9, 10].freeze
ALMA_ROOT_DIR =

The root directory for AlmaLinux resource data fixtures

File.join(REDHAT_FAMILY_ROOT, 'AlmaLinux')
ALMA_MAJVER =

The major versions of AlmaLinux resource data fixtures

[8, 9, 10].freeze
ROCKY_ROOT_DIR =

The root directory for Rocky resource data fixtures

File.join(REDHAT_FAMILY_ROOT, 'Rocky')
ROCKY_MAJVER =

The major versions of Rocky resource data fixtures

[8, 9, 10].freeze
WINDOWS_ROOT_DIR =

The root directory for Windows resource data fixtures

File.join(DATA_ROOT, 'windows', 'windows')
WINDOWS_MAJVER =

The major versions of Windows resource data fixtures

[10, 2016, 2019, 2022].freeze
SYNTHETIC_DATA_ROOT =

The root directory for synthetic resource data fixtures

File.join(Dir.pwd, 'spec', 'fixtures', 'unit', 'puppet_x', 'puppetlabs', 'sce', 'data_processor')
SPECIAL_CONTROLS =

The special controls that are not mapped to a framework

['sce_options', 'sce_protected'].freeze
RESOURCES_KEY =

The key prefix for the resources

"#{CemSpecHelper::MODULE_NAME}::resources"

Instance Method Summary collapse

Instance Method Details

#all_controls(rdata_objects) ⇒ Array<String>

Finds all controls in the given array of Resource objects

Parameters:

  • rdata_objects (Array<Resource>) —

    An array of Resource objects

Returns:

  • (Array<String>) —

    An array of control names



215
216
217
 
# File 'lib/cem_spec_helper/resource_data_spec.rb', line 215

def all_controls(rdata_objects)
  rdata_objects.map(&:controls).flatten
end

#alma_resource_data(majver = nil, as_objects: false) ⇒ Array<Hash>, Array<Resource>

Parameters:

  • majver (String) (defaults to: nil) —

    The major version of the OS

  • as_objects (Boolean) (defaults to: false) —

    Whether or not to return the resource data as objects or hashes

Returns:

  • (Array<Hash>) —

    An array of hashes containing the resource data

  • (Array<Resource>) —

    An array of Resource objects

Raises:

  • (ArgumentError) —

    If the major version is not found



103
104
105
106
107
 
# File 'lib/cem_spec_helper/resource_data_spec.rb', line 103

def alma_resource_data(majver = nil, as_objects: false)
  raise ArgumentError, "major version #{majver} not found" unless majver.nil? || ALMA_MAJVER.include?(majver.to_i)

  load_resource_data(ALMA_ROOT_DIR, majver, as_objects: as_objects)
end

#centos_resource_data(majver = nil, as_objects: false) ⇒ Array<Hash>, Array<Resource>

Parameters:

  • majver (String) (defaults to: nil) —

    The major version of the OS

  • as_objects (Boolean) (defaults to: false) —

    Whether or not to return the resource data as objects or hashes

Returns:

  • (Array<Hash>) —

    An array of hashes containing the resource data

  • (Array<Resource>) —

    An array of Resource objects

Raises:

  • (ArgumentError) —

    If the major version is not found



85
86
87
88
89
 
# File 'lib/cem_spec_helper/resource_data_spec.rb', line 85

def centos_resource_data(majver = nil, as_objects: false)
  raise ArgumentError, "major version #{majver} not found" unless majver.nil? || CENTOS_MAJVER.include?(majver.to_i)

  load_resource_data(CENTOS_ROOT_DIR, majver, as_objects: as_objects)
end

#duplicate_controls(rdata_objects) ⇒ Array<String>

Finds all controls that are duplicated in the given array of Resource objects

Parameters:

  • rdata_objects (Array<Resource>) —

    An array of Resource objects

Returns:

  • (Array<String>) —

    An array of control names



222
223
224
225
226
 
# File 'lib/cem_spec_helper/resource_data_spec.rb', line 222

def duplicate_controls(rdata_objects)
  all = all_controls(rdata_objects)
  # Lets go O(n^2) solution!
  all.select { |c| all.count(c) > 1 }.reject { |c| SPECIAL_CONTROLS.include?(c) }.uniq
end

#find_resource_data(osname, majver = nil, as_objects: false) ⇒ Array<Hash>, Array<Resource>

Finds and loads resource data for a given OS and major version

Parameters:

  • osname (String) —

    The name of the OS

  • majver (String) (defaults to: nil) —

    The major version of the OS

  • as_objects (Boolean) (defaults to: false) —

    Whether or not to return the resource data as objects or hashes

Returns:

  • (Array<Hash>) —

    An array of hashes containing the resource data

  • (Array<Resource>) —

    An array of Resource objects

Raises:

  • (ArgumentError) —

    If the OS name or major version is not found



49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
 
# File 'lib/cem_spec_helper/resource_data_spec.rb', line 49

def find_resource_data(osname, majver = nil, as_objects: false)
  case osname
  when 'RedHat'
    redhat_resource_data(majver, as_objects: as_objects)
  when 'CentOS'
    centos_resource_data(majver, as_objects: as_objects)
  when 'OracleLinux'
    oracle_resource_data(majver, as_objects: as_objects)
  when 'AlmaLinux'
    alma_resource_data(majver, as_objects: as_objects)
  when 'Rocky'
    rocky_resource_data(majver, as_objects: as_objects)
  when /^[Ww]indows$/
    windows_resource_data(majver, as_objects: as_objects)
  when /^[Ss]ynthetic/
    synthetic_resource_data(as_objects: as_objects)
  else
    raise "Unknown OS: #{osname}"
  end
end

#load_resource_data(root_dir, majver = nil, as_objects: false) ⇒ Array<Hash>, ...

Loads resource data from a given root directory and major version

Parameters:

  • root_dir (String) —

    The root directory to load resource data from

  • majver (Integer, String, nil) (defaults to: nil) —

    The major version of the OS. If nil, loads all resource data from the root directory.

  • as_objects (Boolean) (defaults to: false) —

    Whether or not to return the resource data as objects or hashes

Returns:

  • (Array<Hash>) —

    An array of hashes containing the resource data

  • (Array<Resource>) —

    An array of Resource objects

  • (Hash) —

    A hash of found major versions => resource data arrays. Is only returned if the majver parameter is nil.

Raises:

  • (ArgumentError) —

    If the root directory is not a valid path

  • (RuntimeError) —

    If the resource data file is not found



193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
 
# File 'lib/cem_spec_helper/resource_data_spec.rb', line 193

def load_resource_data(root_dir, majver = nil, as_objects: false)
  raise ArgumentError, "root_dir \"#{root_dir}\" is not a valid path" unless File.directory?(root_dir)

  unless majver.nil?
    file_path = File.join(root_dir, "#{majver}.yaml")
    raise "Resource data file \"#{file_path}\" not found" unless File.file?(file_path)

    resources = YAML.load_file(file_path)[RESOURCES_KEY]
    final_resources = as_objects ? resources.map { |k, v| Resource.new(k, v) } : resources
    return final_resources
  end

  Dir[File.join(root_dir, '*')].each_with_object({}) do |rdata, hsh|
    resources = YAML.load_file(rdata)[RESOURCES_KEY]
    final_resources = as_objects ? resources.map { |k, v| Resource.new(k, v) } : resources
    hsh[File.basename(rdata, '.yaml')] = final_resources
  end
end

#multi_control_resources(distro, majver = nil, benchmark = 'cis', max: nil) ⇒ Hash

Finds all resources that implement multiple controls

Parameters:

  • distro (String)
  • majver (String) (defaults to: nil)
  • benchmark (String) (defaults to: 'cis') —

    either cis or stig

  • max (nil, Integer) (defaults to: nil) —

    maximum number of resources to return

Returns:

  • (Hash) —

    A hash of control_name => [resource type, resource title]



164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
 
# File 'lib/cem_spec_helper/resource_data_spec.rb', line 164

def multi_control_resources(distro, majver = nil, benchmark = 'cis', max: nil)
  resources = find_resource_data(distro, majver, as_objects: true)
  resources.select! { |res| res.controls(include_special: false).length > 1 }
  resources = max.nil? ? resources : resources.first(max)
  resources.map! do |res|
    [res.controls, [res.type, res.title]]
  end
  resources = resources.to_h
  # Reduce to just benchmark-related keypairs
  case benchmark
  when 'cis'
    resources.reject! { |k, _v| k.match?(%r{^V-}) }
  when 'stig'
    resources.select! { |k, _v| k.match?(%r{^V-}) }
  end
  resources
end

#not_in_mapping_data(rdata_objects, mdata_array) ⇒ Array<String>

Finds all controls that are not mapped in the given array of Resource objects and mapping data array

Parameters:

  • rdata_objects (Array<Resource>) —

    An array of Resource objects

  • mdata_array (Array<Hash>) —

    An array of hashes containing mapping data

Returns:

  • (Array<String>) —

    An array of control names



232
233
234
235
236
237
238
 
# File 'lib/cem_spec_helper/resource_data_spec.rb', line 232

def not_in_mapping_data(rdata_objects, mdata_array)
  all = all_controls(rdata_objects)
  mdata_array.compact.each do |m|
    all -= m.keys
  end
  all.reject { |c| SPECIAL_CONTROLS.include?(c) }.uniq
end

#oracle_resource_data(majver = nil, as_objects: false) ⇒ Array<Hash>, Array<Resource>

Parameters:

  • majver (String) (defaults to: nil) —

    The major version of the OS

  • as_objects (Boolean) (defaults to: false) —

    Whether or not to return the resource data as objects or hashes

Returns:

  • (Array<Hash>) —

    An array of hashes containing the resource data

  • (Array<Resource>) —

    An array of Resource objects

Raises:

  • (ArgumentError) —

    If the major version is not found



94
95
96
97
98
 
# File 'lib/cem_spec_helper/resource_data_spec.rb', line 94

def oracle_resource_data(majver = nil, as_objects: false)
  raise ArgumentError, "major version #{majver} not found" unless majver.nil? || ORACLE_MAJVER.include?(majver.to_i)

  load_resource_data(ORACLE_ROOT_DIR, majver, as_objects: as_objects)
end

#redhat_resource_data(majver = nil, as_objects: false) ⇒ Array<Hash>, Array<Resource>

Shortcut methods for loading resource data for a specific OS

Parameters:

  • majver (String) (defaults to: nil) —

    The major version of the OS

  • as_objects (Boolean) (defaults to: false) —

    Whether or not to return the resource data as objects or hashes

Returns:

  • (Array<Hash>) —

    An array of hashes containing the resource data

  • (Array<Resource>) —

    An array of Resource objects

Raises:

  • (ArgumentError) —

    If the major version is not found



76
77
78
79
80
 
# File 'lib/cem_spec_helper/resource_data_spec.rb', line 76

def redhat_resource_data(majver = nil, as_objects: false)
  raise ArgumentError, "major version #{majver} not found" unless majver.nil? || REDHAT_MAJVER.include?(majver.to_i)

  load_resource_data(REDHAT_ROOT_DIR, majver, as_objects: as_objects)
end

#rocky_resource_data(majver = nil, as_objects: false) ⇒ Array<Hash>, Array<Resource>

Parameters:

  • majver (String) (defaults to: nil) —

    The major version of the OS

  • as_objects (Boolean) (defaults to: false) —

    Whether or not to return the resource data as objects or hashes

Returns:

  • (Array<Hash>) —

    An array of hashes containing the resource data

  • (Array<Resource>) —

    An array of Resource objects

Raises:

  • (ArgumentError) —

    If the major version is not found



112
113
114
115
116
 
# File 'lib/cem_spec_helper/resource_data_spec.rb', line 112

def rocky_resource_data(majver = nil, as_objects: false)
  raise ArgumentError, "major version #{majver} not found" unless majver.nil? || ROCKY_MAJVER.include?(majver.to_i)

  load_resource_data(ROCKY_ROOT_DIR, majver, as_objects: as_objects)
end

#single_control_resources(distro, majver = nil, benchmark = 'cis', max: nil) ⇒ Hash

Finds all resources that only implement a single control

Parameters:

  • distro (String)
  • majver (String) (defaults to: nil)
  • benchmark (String) (defaults to: 'cis') —

    either cis or stig

  • max (nil, Integer) (defaults to: nil) —

    maximum number of resources to return. If nil, returns all

Returns:

  • (Hash) —

    A hash of control_name => [resource type, resource title]



140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
 
# File 'lib/cem_spec_helper/resource_data_spec.rb', line 140

def single_control_resources(distro, majver = nil, benchmark = 'cis', max: nil)
  resources = find_resource_data(distro, majver, as_objects: true)
  resources.select! { |res| res.controls(include_special: false).length == 1 }
  resources = max.nil? ? resources : resources.first(max)
  resources.map! do |res|
    [res.controls.first, [res.type, res.title]]
  end
  resources = resources.to_h
  # Reduce to just benchmark-related keypairs
  case benchmark
  when 'cis'
    resources.reject! { |k, _v| k.match?(%r{^V-}) }
  when 'stig'
    resources.select! { |k, _v| k.match?(%r{^V-}) }
  end
  resources
end

#synthetic_resource_data(as_objects: false) ⇒ Array<Hash>, Array<Resource>

Shortcut method for loading synthetic resource data

Parameters:

  • as_objects (Boolean) (defaults to: false) —

    Whether or not to return the resource data as objects or hashes

Returns:

  • (Array<Hash>) —

    An array of hashes containing the resource data

  • (Array<Resource>) —

    An array of Resource objects



130
131
132
 
# File 'lib/cem_spec_helper/resource_data_spec.rb', line 130

def synthetic_resource_data(as_objects: false)
  load_resource_data(SYNTHETIC_DATA_ROOT, 'test_resource_data', as_objects: as_objects)
end

#windows_resource_data(majver = nil, as_objects: false) ⇒ Array<Hash>, Array<Resource>

Parameters:

  • majver (String) (defaults to: nil) —

    The major version of the OS

  • as_objects (Boolean) (defaults to: false) —

    Whether or not to return the resource data as objects or hashes

Returns:

  • (Array<Hash>) —

    An array of hashes containing the resource data

  • (Array<Resource>) —

    An array of Resource objects

Raises:

  • (ArgumentError) —

    If the major version is not found



121
122
123
124
125
 
# File 'lib/cem_spec_helper/resource_data_spec.rb', line 121

def windows_resource_data(majver = nil, as_objects: false)
  raise ArgumentError, "major version #{majver} not found" unless majver.nil? || WINDOWS_MAJVER.include?(majver.to_i)

  load_resource_data(WINDOWS_ROOT_DIR, majver, as_objects: as_objects)
end