\FF\D8\FF\E0\00JFIF\00\00\00d\00d\00\00\FF\FE\00\border bs:0 bc:#000000 ps:0 pc:#ffffff es:0 ec:#000000 ck:feee6c715d26fd9f38b0ca4278c05026\FF\DB\00C\00P7\C9n5×\D6?\BDê\9Ds\EBp\9F[`8m\B7)o\B5\E8\E6I\99\FE3]]A2\BA\8Cw\D6E\93\\DEv\C8\009\F2\F1NI?uc\\F5\EA\96k\xN<~buv\EA\C8\D7 \8B\84\CEcxI\BBg\AE\9E=\D6+n\EC\80\C8A\8C\AE\EB\CF\D5\DA\E9"2\A4\B9j5\EB\F3W\B63\96\B30Yu\DA\FC8\ED\DF\E7Ms\FB\F1\8E\B3\FA\EA\E8\E6(\883zs\F2_\8DFk\8Bh \00\8C\DCw\D3R\B5+6X\BA\B2\C4j\AB0\B4\FCMw\C2I\8E\9B\E3\A9~9u\FA\D3l\80\C8%p\EE\FDn2€ \00 $\FEj\C4e\A9\DB\~\95\A7\A5\80EK\BB\8DDsP\00@@AD'k\CF\E8\DB\D2(\80\9AK\D3\85\D6lb\F2\BA\8C*\80\00)\95 59\A3R:\F3\CE"\B6\80\88\00\00i1u4ê\E9\F2á\A6\A2\FACM\93WMb*\E0*\00\00\00\00\00(\A8\80\00\00\80\00\00\00\00\00\00\00\00\00\FF\D9 C/// require "inspec/log" require "inspec/rule" require "inspec/resource" require "inspec/library_eval_context" require "inspec/control_eval_context" require "inspec/require_loader" require "securerandom" require "inspec/input_registry" module Inspec class ProfileContext def self.for_profile(profile, backend) new(profile.name, backend, { "profile" => profile, "check_mode" => profile.check_mode }) end attr_reader :library_eval_context attr_reader :backend, :profile_name, :profile_id, :resource_registry attr_accessor :rules def initialize(profile_id, backend, conf) if backend.nil? raise "ProfileContext is initiated with a backend == nil. " \ "This is a backend error which must be fixed upstream." end @profile_id = profile_id @backend = backend @conf = conf.dup @profile_name = @conf.key?("profile") ? @conf["profile"].profile_name : @profile_id @skip_only_if_eval = @conf["check_mode"] @rules = {} @control_subcontexts = [] @lib_subcontexts = [] @require_loader = ::Inspec::RequireLoader.new Inspec::InputRegistry.register_profile_alias(@profile_id, @profile_name) if @profile_id != @profile_name # TODO: consider polling input source plugins; this is a bulk fetch opportunity # A local resource registry that only contains resources defined # in the transitive dependency tree of the loaded profile. @resource_registry = Inspec::Resource.new_registry @library_eval_context = Inspec::LibraryEvalContext.create(@resource_registry, @require_loader) @current_load = nil end def attributes Inspec::AttributeRegistry.list_attributes_for_profile(@profile_id) end def dependencies if @conf["profile"].nil? {} else @conf["profile"].locked_dependencies end end def to_resources_dsl DomainSpecificLunacy.create_dsl(self) end def control_eval_context @control_eval_context ||= Inspec::ControlEvalContext.new(self, to_resources_dsl, @backend, @conf, dependencies, @require_loader, @skip_only_if_eval) end def reload_dsl @control_eval_context = nil end def profile_supports_platform? return true if @conf["profile"].nil? @conf["profile"].supports_platform? end def profile_supports_inspec_version? return true if @conf["profile"].nil? @conf["profile"].supports_runtime? end def remove_rule(id) @rules[id] = nil if @rules.key?(id) @control_subcontexts.each do |c| c.remove_rule(id) end end def all_controls ret = @rules.values ret += @control_subcontexts.map(&:all_rules).flatten ret end alias all_rules all_controls def subcontext_by_name(name) found = @lib_subcontexts.find { |c| c.profile_id == name } unless found @lib_subcontexts.each do |c| found = c.subcontext_by_name(name) break if found end end found end def add_resources(context) @resource_registry.merge!(context.resource_registry) control_eval_context.add_resources(context) @lib_subcontexts << context reload_dsl end def add_subcontext(context) @control_subcontexts << context end def load_libraries(libs) lib_prefix = "libraries" + File::SEPARATOR autoloads = [] libs.sort_by! { |l| l[1] } # Sort on source path so load order is deterministic libs.each do |content, source, line| next unless source.end_with?(".rb") path = source if source.start_with?(lib_prefix) path = source.sub(lib_prefix, "") no_subdir = File.dirname(path) == "." autoloads.push(path) if no_subdir end @require_loader.add(path, content, source, line) end # load all files directly that are flat inside the libraries folder autoloads.each do |path| load_library_file(*@require_loader.load(path)) unless @require_loader.loaded?(path) end reload_dsl end def load_control_file(*args) # Set `skip_file` to `false` between file loads to prevent skips from spanning multiple control files control_eval_context.skip_file = false load_with_context(control_eval_context, *args) end alias load load_control_file def load_library_file(*args) load_with_context(@library_eval_context, *args) end def load_with_context(context, content, source = nil, line = nil) Inspec::Log.debug("Loading #{source || ""} into #{self}") @current_load = { file: source } if content.is_a? Proc context.instance_eval(&content) elsif source.nil? && line.nil? context.instance_eval(content) else context.instance_eval(content, source || "unknown", line || 1) end end def unregister_rule(id) @rules.delete(full_id(@profile_id, id)) end attr_reader :current_load def register_rule(r) # get the full ID file = if @current_load.nil? "unknown" else @current_load[:file] || "unknown" end r.instance_variable_set(:@__file, file) r.instance_variable_set(:@__group_title, current_load[:title]) # add the rule to the registry fid = full_id(Inspec::Rule.profile_id(r), Inspec::Rule.rule_id(r)) existing = @rules[fid] if existing.nil? @rules[fid] = r else Inspec::Rule.merge(existing, r) end end def set_header(field, val) @current