view modules/apache/spec/defines/mod_spec.rb @ 370:cd0e77678dca

Block more SSH probe usernames from recent attack
author IBBoard <dev@ibboard.co.uk>
date Sat, 27 Feb 2021 18:39:46 +0000
parents d9352a684e62
children
line wrap: on
line source

require 'spec_helper'

describe 'apache::mod', type: :define do
  let :pre_condition do
    'include apache'
  end

  context 'on a RedHat osfamily' do
    let :facts do
      {
        osfamily: 'RedHat',
        operatingsystemrelease: '6',
        operatingsystem: 'RedHat',
        id: 'root',
        kernel: 'Linux',
        path: '/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin',
        is_pe: false,
      }
    end

    describe 'for non-special modules' do
      let :title do
        'spec_m'
      end

      it { is_expected.to contain_class('apache::params') }
      it 'manages the module load file' do
        is_expected.to contain_file('spec_m.load').with(path: '/etc/httpd/conf.d/spec_m.load',
                                                        content: "LoadModule spec_m_module modules/mod_spec_m.so\n",
                                                        owner: 'root',
                                                        group: 'root',
                                                        mode: '0644')
      end
    end

    describe 'with file_mode set' do
      let :pre_condition do
        "class {'::apache': file_mode => '0640'}"
      end
      let :title do
        'spec_m'
      end

      it 'manages the module load file' do
        is_expected.to contain_file('spec_m.load').with(mode: '0640')
      end
    end

    describe 'with shibboleth module and package param passed' do
      # name/title for the apache::mod define
      let :title do
        'xsendfile'
      end
      # parameters
      let(:params) { { package: 'mod_xsendfile' } }

      it { is_expected.to contain_class('apache::params') }
      it { is_expected.to contain_package('mod_xsendfile') }
    end
  end

  context 'on a Debian osfamily' do
    let :facts do
      {
        osfamily: 'Debian',
        operatingsystemrelease: '8',
        lsbdistcodename: 'jessie',
        operatingsystem: 'Debian',
        id: 'root',
        kernel: 'Linux',
        path: '/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin',
        is_pe: false,
      }
    end

    describe 'for non-special modules' do
      let :title do
        'spec_m'
      end

      it { is_expected.to contain_class('apache::params') }
      it 'manages the module load file' do
        is_expected.to contain_file('spec_m.load').with(path: '/etc/apache2/mods-available/spec_m.load',
                                                        content: "LoadModule spec_m_module /usr/lib/apache2/modules/mod_spec_m.so\n",
                                                        owner: 'root',
                                                        group: 'root',
                                                        mode: '0644')
      end
      it 'links the module load file' do
        is_expected.to contain_file('spec_m.load symlink').with(path: '/etc/apache2/mods-enabled/spec_m.load',
                                                                target: '/etc/apache2/mods-available/spec_m.load',
                                                                owner: 'root',
                                                                group: 'root',
                                                                mode: '0644')
      end
    end
  end

  context 'on a FreeBSD osfamily' do
    let :facts do
      {
        osfamily: 'FreeBSD',
        operatingsystemrelease: '9',
        operatingsystem: 'FreeBSD',
        id: 'root',
        kernel: 'FreeBSD',
        path: '/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin',
        is_pe: false,
      }
    end

    describe 'for non-special modules' do
      let :title do
        'spec_m'
      end

      it { is_expected.to contain_class('apache::params') }
      it 'manages the module load file' do
        is_expected.to contain_file('spec_m.load').with(path: '/usr/local/etc/apache24/Modules/spec_m.load',
                                                        content: "LoadModule spec_m_module /usr/local/libexec/apache24/mod_spec_m.so\n",
                                                        owner: 'root',
                                                        group: 'wheel',
                                                        mode: '0644')
      end
    end
  end

  context 'on a Gentoo osfamily' do
    let :facts do
      {
        osfamily: 'Gentoo',
        operatingsystem: 'Gentoo',
        operatingsystemrelease: '3.16.1-gentoo',
        id: 'root',
        kernel: 'Linux',
        path: '/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/bin',
        is_pe: false,
      }
    end

    describe 'for non-special modules' do
      let :title do
        'spec_m'
      end

      it { is_expected.to contain_class('apache::params') }
      it 'manages the module load file' do
        is_expected.to contain_file('spec_m.load').with(path: '/etc/apache2/modules.d/spec_m.load',
                                                        content: "LoadModule spec_m_module /usr/lib/apache2/modules/mod_spec_m.so\n",
                                                        owner: 'root',
                                                        group: 'wheel',
                                                        mode: '0644')
      end
    end
  end
end