2019-11-03 23:22:18 +00:00
|
|
|
import os
|
|
|
|
|
|
|
|
|
|
import testinfra.utils.ansible_runner
|
|
|
|
|
|
|
|
|
|
testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
|
2021-06-07 20:28:36 +00:00
|
|
|
os.environ["MOLECULE_INVENTORY_FILE"]
|
|
|
|
|
).get_hosts("all")
|
2019-11-03 23:22:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_sysctl_file(host):
|
|
|
|
|
sysctl = host.file("/etc/sysctl.d/local.conf")
|
|
|
|
|
|
|
|
|
|
assert sysctl.exists
|
|
|
|
|
assert sysctl.user == "root"
|
|
|
|
|
assert sysctl.group == "root"
|
|
|
|
|
assert sysctl.mode == 0o644
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_modprobe_file(host):
|
|
|
|
|
modprobe = host.file("/etc/modprobe.d/custom.conf")
|
|
|
|
|
|
|
|
|
|
assert modprobe.exists
|
|
|
|
|
assert modprobe.user == "root"
|
|
|
|
|
assert modprobe.group == "root"
|
|
|
|
|
assert modprobe.mode == 0o644
|
|
|
|
|
assert modprobe.contains("install usb-storage /bin/true")
|
|
|
|
|
assert modprobe.contains("blacklist firewire-core")
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_coredump_config(host):
|
|
|
|
|
assert host.file("/etc/sysctl.d/dump.conf").exists
|
|
|
|
|
assert host.file("/etc/security/limits.d/dump.conf").exists
|
|
|
|
|
assert host.file("/etc/profile.d/dump.sh").exists
|
