ruby-openscap/lib/openscap/xccdf/session.rb at 57e404c1217a7090fb7f83cd216912ffe8a99279 · OpenSCAP/ruby-openscap · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
# frozen_string_literal: true

module OpenSCAP
  module Xccdf
    class Session
      def initialize(input_filename)
        raise OpenSCAPError, 'No filename specified!' unless input_filename

        @input_filename = input_filename
        @s = OpenSCAP.xccdf_session_new(input_filename)
        OpenSCAP.raise! if @s.null?
      end

      def sds?
        OpenSCAP.xccdf_session_is_sds(@s)
      end

      def load(opts = {})
        o = {
          datastream_id: nil,
          component_id: nil
        }.merge(opts)
        if sds?
          OpenSCAP.xccdf_session_set_datastream_id(@s, o[:datastream_id])
          OpenSCAP.xccdf_session_set_component_id(@s, o[:component_id])
        end
        OpenSCAP.raise! unless OpenSCAP.xccdf_session_load(@s).zero?
        OpenSCAP.raise! unless OpenSCAP.xccdf_session_load_check_engine_plugins(@s).zero?
      end

      def profile=(p)
        @profile = p
        if OpenSCAP.xccdf_session_set_profile_id(@s, p) == false
          raise OpenSCAPError, "No profile '#{p}' found"
        end
      end

      def evaluate
        OpenSCAP.raise! unless OpenSCAP.xccdf_session_evaluate(@s).zero?
      end

      def remediate
        OpenSCAP.raise! unless OpenSCAP.xccdf_session_remediate(@s).zero?
      end

      def export_results(opts = {})
        o = {
          rds_file: nil,
          xccdf_file: nil,
          report_file: nil,
          oval_results: false,
          oval_variables: false,
          engines_results: false
        }.merge!(opts)
        export_targets o
        export
      end

      def destroy
        OpenSCAP.xccdf_session_free(@s)
        @s = nil
      end

      private

      def export
        OpenSCAP.raise! unless OpenSCAP.xccdf_session_export_oval(@s).zero?
        OpenSCAP.raise! unless OpenSCAP.xccdf_session_export_check_engine_plugins(@s).zero?
        OpenSCAP.raise! unless OpenSCAP.xccdf_session_export_xccdf(@s).zero?
        OpenSCAP.raise! unless OpenSCAP.xccdf_session_export_arf(@s).zero?
      end

      def export_targets(opts = {})
        OpenSCAP.raise! unless OpenSCAP.xccdf_session_set_arf_export(@s, opts[:rds_file])
        OpenSCAP.raise! unless OpenSCAP.xccdf_session_set_xccdf_export(@s, opts[:xccdf_file])
        OpenSCAP.raise! unless OpenSCAP.xccdf_session_set_report_export(@s, opts[:report_file])
        OpenSCAP.xccdf_session_set_oval_results_export(@s, opts[:oval_results])
        OpenSCAP.xccdf_session_set_oval_variables_export(@s, opts[:oval_variables])
        OpenSCAP.xccdf_session_set_check_engine_plugins_results_export(@s, opts[:engines_results])
      end
    end
  end

  attach_function :xccdf_session_new, [:string], :pointer
  attach_function :xccdf_session_free, [:pointer], :void
  attach_function :xccdf_session_load, [:pointer], :int
  attach_function :xccdf_session_load_check_engine_plugins, [:pointer], :int
  attach_function :xccdf_session_evaluate, [:pointer], :int
  attach_function :xccdf_session_remediate, [:pointer], :int
  attach_function :xccdf_session_export_oval, [:pointer], :int
  attach_function :xccdf_session_export_check_engine_plugins, [:pointer], :int
  attach_function :xccdf_session_export_xccdf, [:pointer], :int
  attach_function :xccdf_session_export_arf, [:pointer], :int

  attach_function :xccdf_session_is_sds, [:pointer], :bool

  attach_function :xccdf_session_set_profile_id, %i[pointer string], :bool
  attach_function :xccdf_session_set_datastream_id, %i[pointer string], :void
  attach_function :xccdf_session_set_component_id, %i[pointer string], :void
  attach_function :xccdf_session_set_arf_export, %i[pointer string], :bool
  attach_function :xccdf_session_set_xccdf_export, %i[pointer string], :bool
  attach_function :xccdf_session_set_report_export, %i[pointer string], :bool
  attach_function :xccdf_session_set_oval_variables_export, %i[pointer bool], :void
  attach_function :xccdf_session_set_oval_results_export, %i[pointer bool], :void
  attach_function :xccdf_session_set_check_engine_plugins_results_export, %i[pointer bool], :void
end