security_policy resource
Use the security_policy
Chef InSpec audit resource to test security policies on the Windows platform.
Availability
Install
This resource is distributed with Chef InSpec and is automatically available for use.Version
This resource first became available in v1.0.0 of InSpec.
Syntax
A security_policy
resource block declares the name of a security policy and the value to be tested:
describe security_policy do
its('policy_name') { should eq 'value' }
end
describe security_policy(translate_sid: true) do
its('policy_name') { should include 'sid_name' }
end
where
'policy_name'
must specify a security policy{ should eq 'value' }
tests the value ofpolicy_name
against the value declared in the testtranslate_sid
converts the security identifier (SID) into a human readable SID name iftrue
. Default value isfalse
.
Properties
This resource supports any of the security policy name as properties for e.g. SeNetworkLogonRigth
, SeRemoteInteractiveLogonRight
etc.
its('SeNetworkLogonRight') { should eq '*S-1-5-11' }
Examples
The following examples show how to use this Chef InSpec audit resource.
Verify that only the Administrators group has remote access
describe security_policy do
its('SeRemoteInteractiveLogonRight') { should eq '*S-1-5-32-544' }
end