class Inspec::Resources::UnixUser

implements generic unix id handling

Attributes

id_cmd[R]
inspec[R]
list_users_cmd[R]

Public Class Methods

new(inspec) click to toggle source
Calls superclass method Inspec::Resources::UserInfo::new
# File lib/inspec/resources/users.rb, line 384
def initialize(inspec)
  @inspec = inspec
  @id_cmd ||= "id"
  @list_users_cmd ||= 'cut -d: -f1 /etc/passwd | grep -v "^#"'
  super
end

Public Instance Methods

identity(username) click to toggle source

extracts the identity

# File lib/inspec/resources/users.rb, line 411
def identity(username)
  cmd = inspec.command("#{id_cmd} #{username}")
  return nil if cmd.exit_status != 0

  # parse words
  params = SimpleConfig.new(
    parse_id_entries(cmd.stdout.chomp),
    assignment_regex: /^\s*([^=]*?)\s*=\s*(.*?)\s*$/,
    group_re: nil,
    multiple_values: false
  ).params

  {
    uid: convert_to_i(parse_value(params["uid"]).keys[0]),
    username: parse_value(params["uid"]).values[0],
    gid: convert_to_i(parse_value(params["gid"]).keys[0]),
    groupname: parse_value(params["gid"]).values[0],
    groups: parse_value(params["groups"]).values,
  }
end
list_users() click to toggle source

returns a list of all local users on a system

# File lib/inspec/resources/users.rb, line 392
def list_users
  cmd = inspec.command(list_users_cmd)
  return [] if cmd.exit_status != 0

  cmd.stdout.chomp.lines
end
parse_id_entries(raw) click to toggle source

splits the results of id into seperate lines

# File lib/inspec/resources/users.rb, line 433
def parse_id_entries(raw)
  data = []
  until (index = raw.index(/\)\s{1}/)).nil?
    data.push(raw[0, index + 1]) # inclue closing )
    raw = raw[index + 2, raw.length - index - 2]
  end
  data.push(raw) unless raw.nil?
  data.join("\n")
end
parse_value(line) click to toggle source

parse one id entry like '0(wheel)''

# File lib/inspec/resources/users.rb, line 400
def parse_value(line)
  SimpleConfig.new(
    line,
    line_separator: ",",
    assignment_regex: /^\s*([^\(]*?)\s*\(\s*(.*?)\)*$/,
    group_re: nil,
    multiple_values: false
  ).params
end