-
Notifications
You must be signed in to change notification settings - Fork 3
/
.kitchen.yml
105 lines (95 loc) · 4.04 KB
/
.kitchen.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
---
driver:
name: vagrant
provisioner:
name: chef_zero
# You may wish to disable always updating cookbooks in CI or other testing environments.
# For example:
# always_update_cookbooks: <%= !ENV['CI'] %>
always_update_cookbooks: true
verifier:
name: inspec
platforms:
- name: windows2016
os_type: windows
transport:
name: winrm
elevated: true
suites:
- name: default
run_list:
- recipe[cb_cis_windows_2016::default]
verifier:
inspec_tests:
- name: firewall
run_list:
#- recipe[cb_cis_windows_2016::cis-9-1-domain-profile]
#- recipe[cb_cis_windows_2016::cis-9-2-private-profile]
- recipe[cb_cis_windows_2016::cis-9-3-public-profile]
verifier:
inspec_tests:
#- test/integration/default/cis-9-1-domain-profile_test.rb
#- test/integration/default/cis-9-2-private-profile_test.rb
- test/integration/default/cis-9-3-public-profile_test.rb
- name: account_policies
run_list:
- recipe[cb_cis_windows_2016::default]
verifier:
inspec_tests:
- test/integration/default/cis-1-1-password-policy_test.rb
- test/integration/default/cis-1-2-account-lockout-policy_test.rb
- name: local_policies
run_list:
- recipe[cb_cis_windows_2016::default]
verifier:
inspec_tests:
- test/integration/default/cis-2-2-user-rights-assignment_test.rb
- test/integration/default/cis-2-3-1-accounts_test.rb
- test/integration/default/cis-2-3-2-audit_test.rb
- test/integration/default/cis-2-3-4-devices_test.rb
- test/integration/default/cis-2-3-5-domain-controllers_test.rb
- test/integration/default/cis-2-3-6-domain-member_test.rb
- test/integration/default/cis-2-3-7-interactive-logon_test.rb
- test/integration/default/cis-2-3-8-microsoft-network-client_test.rb
- test/integration/default/cis-2-3-9-microsoft-network-server_test.rb
- test/integration/default/cis-2-3-10-network-access_test.rb
- test/integration/default/cis-2-3-11-network-security_test.rb
- test/integration/default/cis-2-3-13-shutdown_test.rb
- test/integration/default/cis-2-3-15-system-objects_test.rb
- test/integration/default/cis-2-3-17-user-account-control_test.rb
- name: audit_policies
run_list:
- recipe[cb_cis_windows_2016::default]
verifier:
inspec_tests:
- test/integration/default/cis-17-1-account-logon_test.rb
- test/integration/default/cis-17-2-account-management_test.rb
- test/integration/default/cis-17-3-detailed-tracking_test.rb
- test/integration/default/cis-17-4-ds-access_test.rb
- test/integration/default/cis-17-5-logon-logoff_test.rb
- test/integration/default/cis-17-6-object-access_test.rb
- test/integration/default/cis-17-7-policy-change_test.rb
- test/integration/default/cis-17-8-privilege-use_test.rb
- test/integration/default/cis-17-9-system_test.rb
- name: admin_templates_computer
run_list:
- recipe[cb_cis_windows_2016::default]
verifier:
inspec_tests:
- test/integration/default/cis-18-1-control-panel_test.rb
- test/integration/default/cis-18-2-laps_test.rb
- test/integration/default/cis-18-3-mss_test.rb
- test/integration/default/cis-18-4-network_test.rb
- test/integration/default/cis-18-6-scm-pass-the-hash-mitigations_test.rb
- test/integration/default/cis-18-7-start-menu-and-taskbar_test.rb
- test/integration/default/cis-18-8-system_test.rb
- test/integration/default/cis-18-9-windows-components_test.rb
- name: admin_templates_user
run_list:
- recipe[cb_cis_windows_2016::default]
verifier:
inspec_tests:
- test/integration/default/cis-19-1-admin-templates-user-control-panel_test.rb
- test/integration/default/cis-19-5-admin-templates-start-menu-and-taskbar_test.rb
- test/integration/default/cis-19-6-admin-templates-system_test.rb
- test/integration/default/cis-19-7-admin-templates-windows-components_test.rb