class Inspec::Resources::Ip6Tables

Public Class Methods

new(params = {}) click to toggle source
# File lib/inspec/resources/ip6tables.rb, line 32
def initialize(params = {})
  @table = params[:table]
  @chain = params[:chain]

  # we're done if we are on linux
  return if inspec.os.linux?

  # ensures, all calls are aborted for non-supported os
  @ip6tables_cache = []
  skip_resource "The `ip6tables` resource is not supported on your OS yet."
end

Public Instance Methods

has_rule?(rule = nil, _table = nil, _chain = nil) click to toggle source
# File lib/inspec/resources/ip6tables.rb, line 44
def has_rule?(rule = nil, _table = nil, _chain = nil)
  # checks if the rule is part of the ruleset
  # for now, we expect an exact match
  retrieve_rules.any? { |line| line.casecmp(rule) == 0 }
end
retrieve_rules() click to toggle source
# File lib/inspec/resources/ip6tables.rb, line 50
def retrieve_rules
  return @ip6tables_cache if defined?(@ip6tables_cache)

  # construct ip6tables command to read all rules
  bin = find_ip6tables_or_error
  table_cmd = "-t #{@table}" if @table
  ip6tables_cmd = format("%s %s -S %s", bin, table_cmd, @chain).strip

  cmd = inspec.command(ip6tables_cmd)
  return [] if cmd.exit_status.to_i != 0

  # split rules, returns array or rules
  @ip6tables_cache = cmd.stdout.split("\n").map(&:strip)
end
to_s() click to toggle source
# File lib/inspec/resources/ip6tables.rb, line 65
def to_s
  format("Ip6tables %s %s", @table && "table: #{@table}", @chain && "chain: #{@chain}").strip
end

Private Instance Methods

find_ip6tables_or_error() click to toggle source
# File lib/inspec/resources/ip6tables.rb, line 71
def find_ip6tables_or_error
  %w{/usr/sbin/ip6tables /sbin/ip6tables ip6tables}.each do |cmd|
    return cmd if inspec.command(cmd).exist?
  end

  raise Inspec::Exceptions::ResourceFailed, "Could not find `ip6tables`"
end