Method: Inspec::Resources::LinuxAuditSystem#rules

Defined in:
lib/inspec/resources/linux_audit_system.rb

#rules ⇒ Object

The rules property returns the array of audit rules obtained on auditctl -l. The auditctl -l list all rules, 1 per line.

Raises:



62
63
64
65
66
67
68
 
# File 'lib/inspec/resources/linux_audit_system.rb', line 62

def rules
  auditctl_cmd = inspec.command("#{auditctl_utility} -l")

  raise Inspec::Exceptions::ResourceFailed, "Executing #{auditctl_utility} -l: #{auditctl_cmd.stderr}" if auditctl_cmd.exit_status.to_i != 0

  auditctl_cmd.stdout.strip.split("\n")
end