Class: Inspec::Resources::DarwinGroup

Inherits:

GroupInfo

• Object
• GroupInfo
• Inspec::Resources::DarwinGroup

Defined in:

lib/inspec/resources/groups.rb

Overview

OSX uses opendirectory for groups, so ‘/etc/group` may not be fully accurate This uses `dscacheutil` to get the group info instead of `etc_group`

Instance Attribute Summary

Attributes inherited from GroupInfo

#inspec

Instance Method Summary

• #groups ⇒ Object
• #hashmap(enum, &blk) ⇒ Object
• #runmap(cmd, &blk) ⇒ Object

Methods inherited from GroupInfo

#initialize

Constructor Details

This class inherits a constructor from Inspec::Resources::GroupInfo

Instance Method Details

#groups ⇒ Object

# File 'lib/inspec/resources/groups.rb', line 218

def groups
  # https://apple.stackexchange.com/a/130815

  group_by_id = runmap("dscl . -list /Groups PrimaryGroupID")  { |l| name, id = l.split; [id.to_i, name] }
  userss      = runmap("dscl . -list /Users  PrimaryGroupID")  { |l| name, id = l.split; [name, id.to_i] }
  membership  = runmap("dscl . -list /Groups GroupMembership") { |l| key, *vs = l.split; [key, vs] }
  membership.default_proc = ->(h, k) { h[k] = [] }

  users_by_group = hashmap(userss.keys.group_by { |k| userss[k] }) { |k, vs| [group_by_id[k], vs] }
  users_by_group.each do |name, users|
    membership[name].concat users
  end

  group_info = inspec.command("dscacheutil -q group").stdout.split("\n\n").uniq

  regex = /^([^:]*?)\s*:\s(.*?)\s*$/
  groups = group_info.map do |data|
    inspec.parse_config(data, assignment_regex: regex).params
  end

  # Convert the `dscacheutil` groups to match `inspec.etc_group.entries`
  groups.each { |g| g["gid"] = g["gid"].to_i }
  groups.each do |g|
    users = g.delete("users") || ""
    users = users.split
    users += Array(users_by_group[g["name"]])
    g["members"] = users.sort
  end

  groups # de-dupe/merge by gid
    .group_by { |g| g["gid"] }
    .values
    .map { |subgroups|
      g = subgroups.first

      if subgroups.size != 1
        g["members"] = subgroups.map { |h| h["members"] }.flatten.uniq
      end

      g
    }
end

#hashmap(enum, &blk) ⇒ Object

# File 'lib/inspec/resources/groups.rb', line 214

def hashmap(enum, &blk)
  enum.map(&blk).to_h
end

#runmap(cmd, &blk) ⇒ Object

# File 'lib/inspec/resources/groups.rb', line 210

def runmap(cmd, &blk)
  hashmap(inspec.command(cmd).stdout.lines, &blk)
end