Difference between revisions of "Chef InSpec"

From wikieduonline
Jump to navigation Jump to search
Tags: Mobile web edit, Mobile edit
 
(16 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 
+
[[wikipedia:Chef InSpec]]
  
 
* https://github.com/dev-sec
 
* https://github.com/dev-sec
  
* <code>[[inspec exec]] linux-baseline <ref>https://github.com/dev-sec/linux-baseline</ref></code>
+
== Installation ==
 +
* [[Ubuntu]]: <code>curl https://omnitruck.chef.io/install.sh | sudo bash -s -- -P inspec</code>
 +
* [[Windows]]: <code>. { [[iwr]] -useb https://omnitruck.chef.io/install.ps1 } | iex; install -project InSpec</code>
  
 +
== Examples ==
 +
* <code>[[inspec --help]]</code>
 +
* <code>[[inspec exec]] linux-baseline<ref>https://github.com/dev-sec/linux-baseline</ref></code>
 +
* <code>[[inspec detect]]</code>
 +
* <code>[[inspec check]]</code>
  
 +
== Related terms ==
 
* [[PCI-DSS]]
 
* [[PCI-DSS]]
 
* [[Center for Internet Security (CIS)]]
 
* [[Center for Internet Security (CIS)]]
Line 13: Line 21:
  
  
== Example: Install packages ==
+
* Example: [[Install packages using Chef InSpec]]
  
control 'package-02' do
+
== Activities ==
  [[impact 1.0]]
+
* Read StackOverflow questions about <code>inspec</code>: https://stackoverflow.com/questions/tagged/inspec?tab=Votes
  title 'Do not install Telnet server'
 
  desc 'Telnet protocol uses unencrypted communication, that means the password and other sensitive data are unencrypted.
 
http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf, Chapter 3.2.2'
 
  describe package('telnetd') do
 
    it { should_not be_installed }
 
  end
 
end<ref>https://github.com/dev-sec/linux-baseline/blob/master/controls/package_spec.rb</ref>
 
  
 
== See also ==
 
== See also ==
 +
* {{inspec}}
 
* {{Chef}}
 
* {{Chef}}
 
* {{Hardening}}
 
* {{Hardening}}
  
 
[[Category:Chef]]
 
[[Category:Chef]]

Latest revision as of 07:27, 7 April 2022

Advertising: