class Inspec::Resources::Ip6Tables
Public Class Methods
new(params = {})
click to toggle source
# File lib/inspec/resources/ip6tables.rb, line 32 def initialize(params = {}) @table = params[:table] @chain = params[:chain] # we're done if we are on linux return if inspec.os.linux? # ensures, all calls are aborted for non-supported os @ip6tables_cache = [] skip_resource "The `ip6tables` resource is not supported on your OS yet." end
Public Instance Methods
has_rule?(rule = nil, _table = nil, _chain = nil)
click to toggle source
# File lib/inspec/resources/ip6tables.rb, line 44 def has_rule?(rule = nil, _table = nil, _chain = nil) # checks if the rule is part of the ruleset # for now, we expect an exact match retrieve_rules.any? { |line| line.casecmp(rule) == 0 } end
retrieve_rules()
click to toggle source
# File lib/inspec/resources/ip6tables.rb, line 50 def retrieve_rules return @ip6tables_cache if defined?(@ip6tables_cache) # construct ip6tables command to read all rules bin = find_ip6tables_or_error table_cmd = "-t #{@table}" if @table ip6tables_cmd = format("%s %s -S %s", bin, table_cmd, @chain).strip cmd = inspec.command(ip6tables_cmd) return [] if cmd.exit_status.to_i != 0 # split rules, returns array or rules @ip6tables_cache = cmd.stdout.split("\n").map(&:strip) end
to_s()
click to toggle source
# File lib/inspec/resources/ip6tables.rb, line 65 def to_s format("Ip6tables %s %s", @table && "table: #{@table}", @chain && "chain: #{@chain}").strip end
Private Instance Methods
find_ip6tables_or_error()
click to toggle source
# File lib/inspec/resources/ip6tables.rb, line 71 def find_ip6tables_or_error %w{/usr/sbin/ip6tables /sbin/ip6tables ip6tables}.each do |cmd| return cmd if inspec.command(cmd).exist? end raise Inspec::Exceptions::ResourceFailed, "Could not find `ip6tables`" end