mirror of
https://github.com/saltstack-formulas/openssh-formula.git
synced 2024-12-13 18:40:54 +01:00
267042c838
* ci(kitchen): use `openssh.config` as `state_top` * Semi-automated using https://github.com/myii/ssf-formula/pull/33 * test(pillar): remove deprecated option and disabled method * https://travis-ci.org/myii/openssh-formula/jobs/585340845#L1811-L1813: * test(pillar): use same SSH options as used by Travis * Using existing options locks out after `kitchen converge` (before `verify`) * https://travis-ci.org/myii/openssh-formula/jobs/585356835#L2957-L2965: * test(inspec): add tests based on existing Serverspec tests * Follows on from #166
34 lines
1.2 KiB
Ruby
34 lines
1.2 KiB
Ruby
# Overide by Platform
|
|
root_group = 'root'
|
|
if platform[:family] == 'freebsd'
|
|
root_group = 'wheel'
|
|
end
|
|
|
|
control 'openssh configuration' do
|
|
title 'should match desired lines'
|
|
|
|
describe file('/etc/ssh/sshd_config') do
|
|
it { should be_file }
|
|
its('mode') { should cmp '0644' }
|
|
it { should be_owned_by 'root' }
|
|
it { should be_grouped_into root_group }
|
|
its('content') { should include 'ChallengeResponseAuthentication no' }
|
|
its('content') { should include 'X11Forwarding yes' }
|
|
its('content') { should include 'PrintMotd no' }
|
|
its('content') { should include 'AcceptEnv LANG LC_*' }
|
|
its('content') { should include 'Subsystem sftp /usr/lib/openssh/sftp-server' }
|
|
its('content') { should include 'UsePAM yes' }
|
|
end
|
|
|
|
describe file('/etc/ssh/ssh_config') do
|
|
it { should be_file }
|
|
its('mode') { should cmp '0644' }
|
|
it { should be_owned_by 'root' }
|
|
it { should be_grouped_into root_group }
|
|
its('content') { should include 'Host *' }
|
|
its('content') { should include ' GSSAPIAuthentication yes' }
|
|
its('content') { should include ' HashKnownHosts yes' }
|
|
its('content') { should include ' SendEnv LANG LC_*' }
|
|
end
|
|
end
|