TestMu Conference is Back! Future of Testing + AIRegister for Free

How to use impact method of Inspec Package

Best Inspec_ruby code snippet using Inspec.impact

inspec_util_test.rb

Source:inspec_util_test.rb

...5class InspecUtilTest < Minitest::Test6  def test_inspec_util_exists7    refute_nil Utils::InspecUtil8  end9  def test_string_to_impact10    # CVSS Terms True11    ['none', 'na', 'n/a', 'N/A', 'NONE', 'not applicable', 'not_applicable', 'NOT_APPLICABLE'].each do |word|12      assert_in_delta(0.0, Utils::InspecUtil.get_impact(word))13    end14    ['low', 'cat iii', 'cat   iii', 'CATEGORY III', 'cat 3'].each do |word|15      assert_in_delta(0.3, Utils::InspecUtil.get_impact(word))16    end17    ['medium', 'med', 'cat ii', 'cat   ii', 'CATEGORY II', 'cat 2'].each do |word|18      assert_in_delta(0.5, Utils::InspecUtil.get_impact(word))19    end20    ['high', 'cat i', 'cat   i', 'CATEGORY I', 'cat 1'].each do |word|21      assert_in_delta(0.7, Utils::InspecUtil.get_impact(word))22    end23    %w{critical crit severe}.each do |word|24      assert_in_delta(0.7, Utils::InspecUtil.get_impact(word))25    end26    # CVSS Terms False27    ['none', 'na', 'n/a', 'N/A', 'NONE', 'not applicable', 'not_applicable', 'NOT_APPLICABLE'].each do |word|28      assert_in_delta(0.0, Utils::InspecUtil.get_impact(word, use_cvss_terms: false))29    end30    ['low', 'cat iii', 'cat   iii', 'CATEGORY III', 'cat 3'].each do |word|31      assert_in_delta(0.3, Utils::InspecUtil.get_impact(word, use_cvss_terms: false))32    end33    ['medium', 'med', 'cat ii', 'cat   ii', 'CATEGORY II', 'cat 2'].each do |word|34      assert_in_delta(0.5, Utils::InspecUtil.get_impact(word, use_cvss_terms: false))35    end36    ['high', 'cat i', 'cat   i', 'CATEGORY I', 'cat 1'].each do |word|37      assert_in_delta(0.7, Utils::InspecUtil.get_impact(word, use_cvss_terms: false))38    end39    %w{critical crit severe}.each do |word|40      assert_in_delta(1.0, Utils::InspecUtil.get_impact(word, use_cvss_terms: false))41    end42  end43  def test_float_to_impact44    # CVSS Terms True45    assert_in_delta(0.0, Utils::InspecUtil.get_impact(0.01))46    assert_in_delta(0.3, Utils::InspecUtil.get_impact(0.1))47    assert_in_delta(0.3, Utils::InspecUtil.get_impact(0.2))48    assert_in_delta(0.3, Utils::InspecUtil.get_impact(0.3))49    assert_in_delta(0.5, Utils::InspecUtil.get_impact(0.4))50    assert_in_delta(0.5, Utils::InspecUtil.get_impact(0.5))51    assert_in_delta(0.5, Utils::InspecUtil.get_impact(0.6))52    assert_in_delta(0.7, Utils::InspecUtil.get_impact(0.7))53    assert_in_delta(0.7, Utils::InspecUtil.get_impact(0.8))54    assert_in_delta(0.7, Utils::InspecUtil.get_impact(0.9))55    # CVSS Terms False56    assert_in_delta(0.0, Utils::InspecUtil.get_impact(0.01, use_cvss_terms: false))57    assert_in_delta(0.3, Utils::InspecUtil.get_impact(0.1, use_cvss_terms: false))58    assert_in_delta(0.3, Utils::InspecUtil.get_impact(0.2, use_cvss_terms: false))59    assert_in_delta(0.3, Utils::InspecUtil.get_impact(0.3, use_cvss_terms: false))60    assert_in_delta(0.5, Utils::InspecUtil.get_impact(0.4, use_cvss_terms: false))61    assert_in_delta(0.5, Utils::InspecUtil.get_impact(0.5, use_cvss_terms: false))62    assert_in_delta(0.5, Utils::InspecUtil.get_impact(0.6, use_cvss_terms: false))63    assert_in_delta(0.7, Utils::InspecUtil.get_impact(0.7, use_cvss_terms: false))64    assert_in_delta(0.7, Utils::InspecUtil.get_impact(0.8, use_cvss_terms: false))65    assert_in_delta(1.0, Utils::InspecUtil.get_impact(0.9, use_cvss_terms: false))66  end67  def test_get_impact_error68    assert_raises(Utils::InspecUtil::SeverityInputError) do69      Utils::InspecUtil.get_impact('bad value')70    end71    assert_raises(Utils::InspecUtil::SeverityInputError) do72      Utils::InspecUtil.get_impact(9001)73    end74    assert_raises(Utils::InspecUtil::SeverityInputError) do75      Utils::InspecUtil.get_impact(9001.1)76    end77  end78  def test_get_impact_string79    # CVSS True80    assert_equal('none', Utils::InspecUtil.get_impact_string(0))81    assert_equal('none', Utils::InspecUtil.get_impact_string(0.01))82    assert_equal('low', Utils::InspecUtil.get_impact_string(0.1))83    assert_equal('low', Utils::InspecUtil.get_impact_string(0.2))84    assert_equal('low', Utils::InspecUtil.get_impact_string(0.3))85    assert_equal('medium', Utils::InspecUtil.get_impact_string(0.4))86    assert_equal('medium', Utils::InspecUtil.get_impact_string(0.5))87    assert_equal('medium', Utils::InspecUtil.get_impact_string(0.6))88    assert_equal('high', Utils::InspecUtil.get_impact_string(0.7))89    assert_equal('high', Utils::InspecUtil.get_impact_string(0.8))90    assert_equal('high', Utils::InspecUtil.get_impact_string(0.9))91    assert_equal('high', Utils::InspecUtil.get_impact_string(1.0))92    assert_equal('high', Utils::InspecUtil.get_impact_string(1))93    # CVSS False94    assert_equal('none', Utils::InspecUtil.get_impact_string(0, use_cvss_terms: false))95    assert_equal('none', Utils::InspecUtil.get_impact_string(0.01, use_cvss_terms: false))96    assert_equal('low', Utils::InspecUtil.get_impact_string(0.1, use_cvss_terms: false))97    assert_equal('low', Utils::InspecUtil.get_impact_string(0.2, use_cvss_terms: false))98    assert_equal('low', Utils::InspecUtil.get_impact_string(0.3, use_cvss_terms: false))99    assert_equal('medium', Utils::InspecUtil.get_impact_string(0.4, use_cvss_terms: false))100    assert_equal('medium', Utils::InspecUtil.get_impact_string(0.5, use_cvss_terms: false))101    assert_equal('medium', Utils::InspecUtil.get_impact_string(0.6, use_cvss_terms: false))102    assert_equal('high', Utils::InspecUtil.get_impact_string(0.7, use_cvss_terms: false))103    assert_equal('high', Utils::InspecUtil.get_impact_string(0.8, use_cvss_terms: false))104    assert_equal('critical', Utils::InspecUtil.get_impact_string(0.9, use_cvss_terms: false))105    assert_equal('critical', Utils::InspecUtil.get_impact_string(1.0, use_cvss_terms: false))106    assert_equal('critical', Utils::InspecUtil.get_impact_string(1, use_cvss_terms: false))107  end108  def test_get_impact_string_error109    assert_raises(Utils::InspecUtil::ImpactInputError) do110      Utils::InspecUtil.get_impact_string(9001)111    end112    assert_raises(Utils::InspecUtil::ImpactInputError) do113      Utils::InspecUtil.get_impact_string(9001.1)114    end115    assert_raises(Utils::InspecUtil::ImpactInputError) do116      Utils::InspecUtil.get_impact_string(-1)117    end118  end119  def test_unpack_inspec_json120    json = JSON.parse(File.read('./examples/sample_json/single_control_profile.json'))121    dir = Dir.mktmpdir122    begin123      Utils::InspecUtil.unpack_inspec_json(dir, json, false, 'ruby')124      assert_path_exists("#{dir}/inspec.yml")125      assert_path_exists("#{dir}/README.md")126      assert(Dir.exist?("#{dir}/libraries"))127      assert(Dir.exist?("#{dir}/controls"))128    ensure129      FileUtils.rm_rf dir130    end...

xccdf2inspec.rb

Source:xccdf2inspec.rb

...47      control = Inspec::Control.new48      control.id     = group.id49      control.title  = group.rule.title50      control.desc   = group.rule.description.vuln_discussion.split('Satisfies: ')[0]51      control.impact = get_impact(group.rule.severity)52      control.add_tag(Inspec::Tag.new('gtitle', group.title))53      control.add_tag(Inspec::Tag.new('satisfies', group.rule.description.vuln_discussion.split('Satisfies: ')[1].split(',').map(&:strip))) if group.rule.description.vuln_discussion.split('Satisfies: ').length > 154      control.add_tag(Inspec::Tag.new('gid',      group.id))55      control.add_tag(Inspec::Tag.new('rid',      group.rule.id))56      control.add_tag(Inspec::Tag.new('stig_id',  group.rule.version))57      control.add_tag(Inspec::Tag.new('fix_id', group.rule.fix.id))58      control.add_tag(Inspec::Tag.new('cci', group.rule.idents))59      control.add_tag(Inspec::Tag.new('nist', @cci_items.fetch_nists(group.rule.idents)))60      control.add_tag(Inspec::Tag.new('false_negatives', group.rule.description.false_negatives)) if group.rule.description.false_negatives != ''61      control.add_tag(Inspec::Tag.new('false_positives', group.rule.description.false_positives)) if group.rule.description.false_positives != ''62      control.add_tag(Inspec::Tag.new('documentable', group.rule.description.documentable)) if group.rule.description.documentable != ''63      control.add_tag(Inspec::Tag.new('mitigations', group.rule.description.false_negatives)) if group.rule.description.mitigations != ''64      control.add_tag(Inspec::Tag.new('severity_override_guidance', group.rule.description.severity_override_guidance)) if group.rule.description.severity_override_guidance != ''65      control.add_tag(Inspec::Tag.new('potential_impacts', group.rule.description.potential_impacts)) if group.rule.description.potential_impacts != ''66      control.add_tag(Inspec::Tag.new('third_party_tools', group.rule.description.third_party_tools)) if group.rule.description.third_party_tools != ''67      control.add_tag(Inspec::Tag.new('mitigation_controls', group.rule.description.mitigation_controls)) if group.rule.description.mitigation_controls != ''68      control.add_tag(Inspec::Tag.new('responsibility', group.rule.description.responsibility)) if group.rule.description.responsibility != ''69      control.add_tag(Inspec::Tag.new('ia_controls', group.rule.description.ia_controls)) if group.rule.description.ia_controls != ''70      control.add_tag(Inspec::Tag.new('check', group.rule.check.check_content))71      control.add_tag(Inspec::Tag.new('fix', group.rule.fixtext))72      @controls << control73    end74  end75  def generate_controls76    Dir.mkdir @output.to_s unless Dir.exist?(@output.to_s)77    Dir.mkdir "#{@output}/controls" unless Dir.exist?("#{@output}/controls")78    Dir.mkdir "#{@output}/libaries" unless Dir.exist?("#{@output}/libraries")79    myfile = File.new("#{@output}/README.md", 'w')80    myfile.puts "# Example InSpec Profile\n\nthis example shows the implementation of an InSpec profile."81    if @seperated82      if @format == 'ruby'83        @controls.each do |control|84          file_name = control.id.to_s85          myfile = File.new("#{@output}/controls/#{file_name}.rb", 'w')86          myfile.puts wrap(control.to_ruby, WIDTH) + "\n"87          myfile.close88        end89      else90        @controls.each do |control|91          file_name = control.id.to_s92          myfile = File.new("#{@output}/controls/#{file_name}.rb", 'w')93          PP.pp(control.to_hash, myfile)94          myfile.close95        end96      end97    else98      myfile = File.new("#{@output}/controls/controls.rb", 'w')99      if @format == 'ruby'100        @controls.each do |control|101          myfile.puts wrap(control.to_ruby, WIDTH) + "\n"102        end103      else104        @controls.each do |control|105          control.desc = control.desc.strip106          PP.pp(control.to_hash, myfile)107        end108      end109      myfile.close110    end111  end112  # @!method print_benchmark_info(info)113  # writes benchmark info to profile inspec.yml file114  #115  def print_benchmark_info116    benchmark_info =117"name: #{@output}118title: #{@xccdf_controls.title}119maintainer: The Authors120copyright: The Authors121copyright_email: you@example.com122license: Apache-2.0123summary: An InSpec Compliance Profile124version: 0.1.0"125    myfile = File.new("#{@output}/inspec.yml", 'w')126    myfile.puts benchmark_info127  end128  # @!method get_impact(severity)129  #   Takes in the STIG severity tag and converts it to the InSpec #{impact}130  #   control tag.131  #   At the moment the mapping is static, so that:132  #     high => 0.7133  #     medium => 0.5134  #     low => 0.3135  # @param severity [String] the string value you want to map to an InSpec136  # 'impact' level.137  #138  # @return impact [Float] the impact level level mapped to the XCCDF severity139  # mapped to a float between 0.0 - 1.0.140  #141  # @todo Allow for the user to pass in a hash for the desired mapping of text142  # values to numbers or to override our hard coded values.143  #144  def get_impact(severity)145    impact = case severity146             when 'low' then 0.3147             when 'medium' then 0.5148             else 0.7149             end150    impact151  end152end...

read_stig_json.rb

Source:read_stig_json.rb

...20#puts JSON.pretty_generate(stig)21def safe(input)22  input.gsub("'", "\\\\'")23end24def impact(input)25  if input == "low"26    output = 0.127  elsif input == "medium"28    output = 0.529  else30    output = 1.031  end32  output33end34def make_inspec_rule(control)35  inspec_file = "src/inspec/#{control}.rb"36  if ! File.file?(inspec_file)37    inspec = <<~HEREDOC38      # START_DESCRIBE #{control}39        # describe file('/etc') do40        #   it { should be_directory }41        # end42      # END_DESCRIBE #{control}43    HEREDOC44    puts "writing #{inspec_file}"45    File.write(inspec_file, inspec)46  else47    puts "reading #{inspec_file}"48    inspec = File.read(inspec_file)49  end50  inspec51end52#  describe service('autofs') do53#    it { should_not be_enabled }54#    it { should_not be_running }55#  end56controls = stig['findings'].keys57controls.each do |control|58  finding = stig['findings'][control]59  output = <<~HEREDOC60    # encoding: utf-861    # copyright: 2016, you62    # license: All rights reserved63    # date: #{stig["date"]}64    # description: #{stig["description"]}65    # impacts66    title '#{control} - #{finding['title']}'67    control '#{control}' do68      impact #{impact(finding['severity'])}69      title '#{finding['title']}'70      desc '\n#{safe(finding['description'])}\n'71      tag 'stig','#{control}'72      tag severity: '#{finding['severity']}'73      tag checkid: '#{finding['checkid']}'74      tag fixid: '#{finding['fixid']}'75      tag version: '#{finding['version']}'76      tag ruleid: '#{finding['ruleID']}'77      tag fixtext: '\n#{safe(finding['fixtext'])}\n'78      tag checktext: '\n#{safe(finding['checktext'])}\n'79    #{make_inspec_rule(control)}80    end81  HEREDOC82  #File.write("#{$dest}/#{control}.rb", output)...

impact

Using AI Code Generation

1describe impact(0.7) do2  describe file('/tmp') do3    it { should be_directory }4describe impact(0.5) do5  describe file('/tmp') do6    it { should be_directory }7describe impact(0.3) do8  describe file('/tmp') do9    it { should be_directory }10describe impact(0.1) do11  describe file('/tmp') do12    it { should be_directory }13describe impact(0.0) do14  describe file('/tmp') do15    it { should be_directory }16describe impact(1.0) do17  describe file('/tmp') do18    it { should be_directory }19describe impact(1.1) do20  describe file('/tmp') do21    it { should be_directory }22describe impact(-1.0) do23  describe file('/tmp') do24    it { should be_directory }25describe impact(-1.1) do26  describe file('/tmp') do27    it { should be_directory }28describe impact('1.0') do29  describe file('/tmp') do30    it { should be_directory }31describe impact('0.5') do32  describe file('/tmp') do33    it { should be_directory }

impact

Using AI Code Generation

1describe impact(0.5) do2  describe file('/tmp') do3    it { should be_directory }4describe file('/tmp') do5  it { should be_directory }6describe file('/tmp') do7  it { should be_directory }8describe file('/tmp') do9  it { should be_directory }10describe file('/tmp') do11  it { should be_directory }12describe file('/tmp') do13  it { should be_directory }14describe file('/tmp') do15  it { should be_directory }16describe file('/tmp') do17  it { should be_directory }18describe file('/tmp') do19  it { should be_directory }20describe file('/tmp') do21  it { should be_directory }22describe file('/tmp') do23  it { should be_directory }

impact

Using AI Code Generation

1  describe package('nginx') do2    it { should be_installed }3  describe service('nginx') do4    it { should be_running }5  describe package('nginx') do6    it { should be_installed }7  describe service('nginx') do8    it { should be_running }9  describe package('nginx') do10    it { should be_installed }11  describe service('nginx') do12    it { should be_running }13  describe package('nginx') do14    it { should be_installed }15  describe service('nginx') do16    it { should be_running }17  describe package('nginx') do18    it { should be_installed }19  describe service('nginx') do20    it { should be_running }21  describe package('nginx') do22    it { should be_installed }23  describe service('nginx') do24    it { should be_running

impact

Using AI Code Generation

1content = inspec.profile.file('attributes.json')2params = JSON.parse(content)3describe file(params['file_path']) do4  its('content') { should match params['file_content'] }5  describe file(params['file_path']) do6    its('content') { should match params['file_content'] }7content = inspec.profile.file('attributes.json')8params = JSON.parse(content)9describe file(params['file_path']) do10  it { should exist }11  describe file(params['file_path']) do12    it { should exist }13content = inspec.profile.file('attributes.json')14params = JSON.parse(content)15describe file(params['file_path']) do16  it { should exist }17  describe file(params['file_path']) do18    it { should exist }19content = inspec.profile.file('attributes.json')20params = JSON.parse(content)

impact

Using AI Code Generation

1describe file('/tmp') do2  it { should be_directory }3describe file('/tmp/1.txt') do4  it { should exist }5describe file('/tmp/1.txt') do6  it { should be_file }7describe file('/tmp/1.txt') do8  it { should be_readable }9describe file('/tmp/1.txt') do10  it { should be_writable }11describe file('/tmp/1.txt') do12  it { should be_executable }13describe file('/tmp/1.txt') do14  it { should be_owned_by 'root' }15describe file('/tmp/1.txt') do16  it { should be_grouped_into 'root' }17describe file('/tmp/1.txt') do18  it { should be_mode 644 }19describe file('/tmp/1.txt') do20  it { should be_linked_to '/tmp/2.txt' }21describe file('/tmp/1.txt') do22  it { should be_mounted }23describe file('/tmp/1.txt') do24  it { should be_socket }25describe file('/tmp/1.txt') do26  it { should be_pipe }27describe file('/tmp/1.txt') do28  it { should be_block_device }29describe file('/tmp/1.txt') do30  it { should be_character_device }

impact

Using AI Code Generation

1    it { should eq 'Impact of a control' }2    it { should eq 'Impact of a control' }3    it { should eq 'Impact of a control' }4    it { should eq 'Impact of a control' }5    it { should eq 'Impact of a control' }

impact

Using AI Code Generation

1describe impact(0.5) do2  describe file('/tmp') do3    it { should be_directory }4describe file('/tmp') do5  it { should be_directory }6describe file('/tmp') do7  it { should be_directory }8describe file('/tmp') do9  it { should be_directory }10describe file('/tmp') do11  it { should be_directory }12describe file('/tmp') do13  it { should be_directory }14describe file('/tmp') do15  it { should be_directory }16describe file('/tmp') do17  it { should be_directory }18describe file('/tmp') dod') do

impact

Using AI Code Generation

1Inspec::Log.info("This is an info message")2Inspec::Log.warn("This is a warning message")3Inspec::Log.error("This is an error message")4  it { should be_directory }5describe file('/tmp') do6  it { should be_directory }7describe file('/tmp') do8  it { should be_directory }

impact

Using AI Code Generation

1    it { should eq 'Impact of a control' }2    it { should eq 'Impact of a control' }3    it { should eq 'Impact of a control' }4    it { should eq 'Impact of a control' }5    it { should eq 'Impact of a control' }

impact

Using AI Code Generation

1describe file('/etc/passwd') do2  it { should exist }3describe file('/etc/passwd') do4  its('content') { should match(/root/) }5describe file('/etc/passwd') do6  its('owner') { should eq 'root' }7describe file('/etc/passwd') do8  its('group') { should eq 'root' }9describe file('/etc/passwd') do10  its('mode') { should cmp '0644' }11describe file('/etc/passwd') do12  it { should_not be_symlink }13describe file('/etc/passwd') do14  it { should_not be_socket }15describe file('/etc/passwd') do16  it { should_not be_block_device }17describe file('/etc/passwd') do18  it { should_not be_character_device }19describe file('/etc/passwd') do20  it { should_not be_pipe }21describe file('/etc/passwd') do22  it { should be_file }23describe file('/etc/passwd') do24  it { should_not be_directory }25describe file('/etc/passwd') do26  it { should be_readable }27describe file('/etc/passwd') do28  it { should be_writable }29describe file('/etc/passwd') do30  it { should be_executable }31describe file('/etc/passwd') do32  it { should_not be_empty }33describe file('/etc/passwd') do

Automation Testing Tutorials

Learn to execute automation testing from scratch with LambdaTest Learning Hub. Right from setting up the prerequisites to run your first automation test, to following best practices and diving deeper into advanced test scenarios. LambdaTest Learning Hubs compile a list of step-by-step guides to help you be proficient with different test automation frameworks i.e. Selenium, Cypress, TestNG etc.