Refactor UID

Signed-off-by: Spencer Owen <spencer.owen@cdw.com>

Author: spencer-cdw

controls/1_4_secure_boot_settings.rb

@@ -37,8 +37,8 @@
         it { should_not be_readable.by 'other' }
         it { should_not be_writable.by 'other' }
         it { should_not be_executable.by 'other' }
-        its('gid') { should cmp 0 }
-        its('uid') { should cmp 0 }
+        it { should be_grouped_into 'root' }
+        it { should be_owned_by 'root' }
       end
     end
   end

controls/5_1_configure_cron.rb

@@ -70,8 +70,8 @@
     it { should_not be_readable.by 'other' }
     it { should_not be_writable.by 'other' }
     it { should_not be_executable.by 'other' }
-    its('uid') { should cmp 0 }
-    its('gid') { should cmp 0 }
+    it { should be_owned_by 'root' }
+    it { should be_grouped_into 'root' }
   end
 end
 
@@ -102,8 +102,8 @@
     it { should_not be_readable.by 'other' }
     it { should_not be_writable.by 'other' }
     it { should_not be_executable.by 'other' }
-    its('uid') { should cmp 0 }
-    its('gid') { should cmp 0 }
+    it { should be_owned_by 'root' }
+    it { should be_grouped_into 'root' }
   end
 end
 
@@ -134,8 +134,8 @@
     it { should_not be_readable.by 'other' }
     it { should_not be_writable.by 'other' }
     it { should_not be_executable.by 'other' }
-    its('uid') { should cmp 0 }
-    its('gid') { should cmp 0 }
+    it { should be_owned_by 'root' }
+    it { should be_grouped_into 'root' }
   end
 end
 
@@ -166,8 +166,8 @@
     it { should_not be_readable.by 'other' }
     it { should_not be_writable.by 'other' }
     it { should_not be_executable.by 'other' }
-    its('uid') { should cmp 0 }
-    its('gid') { should cmp 0 }
+    it { should be_owned_by 'root' }
+    it { should be_grouped_into 'root' }
   end
 end
 
@@ -198,8 +198,8 @@
     it { should_not be_readable.by 'other' }
     it { should_not be_writable.by 'other' }
     it { should_not be_executable.by 'other' }
-    its('uid') { should cmp 0 }
-    its('gid') { should cmp 0 }
+    it { should be_owned_by 'root' }
+    it { should be_grouped_into 'root' }
   end
 end
 
@@ -231,8 +231,8 @@
     it { should_not be_readable.by 'other' }
     it { should_not be_writable.by 'other' }
     it { should_not be_executable.by 'other' }
-    its('uid') { should cmp 0 }
-    its('gid') { should cmp 0 }
+    it { should be_owned_by 'root' }
+    it { should be_grouped_into 'root' }
   end
 end
 
@@ -272,8 +272,8 @@
       it { should_not be_readable.by 'other' }
       it { should_not be_writable.by 'other' }
       it { should_not be_executable.by 'other' }
-      its('uid') { should cmp 0 }
-      its('gid') { should cmp 0 }
+      it { should be_owned_by 'root' }
+      it { should be_grouped_into 'root' }
     end
   end
 end

controls/5_2_ssh_server_configuration.rb

@@ -43,8 +43,8 @@
     it { should_not be_readable.by 'other' }
     it { should_not be_writable.by 'other' }
     it { should_not be_executable.by 'other' }
-    its('uid') { should cmp 0 }
-    its('gid') { should cmp 0 }
+    it { should be_owned_by 'root' }
+    it { should be_grouped_into 'root' }
   end
 end
 
@@ -69,8 +69,8 @@
       it { should_not be_readable.by 'other' }
       it { should_not be_writable.by 'other' }
       it { should_not be_executable.by 'other' }
-      its('gid') { should cmp 0 }
-      its('uid') { should cmp 0 }
+      it { should be_grouped_into 'root' }
+      it { should be_owned_by 'root' }
     end
   end
 end
@@ -96,8 +96,8 @@
       it { should be_readable.by 'other' }
       it { should_not be_writable.by 'other' }
       it { should_not be_executable.by 'other' }
-      its('gid') { should cmp 0 }
-      its('uid') { should cmp 0 }
+      it { should be_grouped_into 'root' }
+      it { should be_owned_by 'root' }
     end
   end
 end

controls/5_4_user_accounts_and_environments.rb

@@ -176,7 +176,7 @@
   tag level: 1
 
   describe passwd.users('root') do
-    its('gids') { should cmp 0 }
+    it { should be_grouped_into 'root' }
   end
 end
 

controls/6_1_system_file_permissions.rb

@@ -107,8 +107,8 @@
     describe file(f) do
       it { should exist }
       its('mode') { should cmp '0644' }
-      its('uid') { should cmp 0 }
-      its('gid') { should cmp 0 }
+      it { should be_owned_by 'root' }
+      it { should be_grouped_into 'root' }
       its('sticky') { should equal false }
       its('suid') { should equal false }
       its('sgid') { should equal false }
@@ -138,8 +138,8 @@
     describe file(f) do
       it { should exist }
       it { should_not be_more_permissive_than('0640') }
-      its('uid') { should cmp 0 }
-      its('gid') { should cmp expected_gid }
+      it { should be_owned_by 'root' }
+      it { should be_grouped_into expected_gid }
     end
   end
 end
@@ -167,8 +167,8 @@
     describe file(f) do
       it { should exist }
       its('mode') { should cmp '0644' }
-      its('uid') { should cmp 0 }
-      its('gid') { should cmp 0 }
+      it { should be_owned_by 'root' }
+      it { should be_grouped_into 'root' }
     end
   end
 end
@@ -197,8 +197,8 @@
     describe file(f) do
       it { should exist }
       it { should_not be_more_permissive_than('0640') }
-      its('uid') { should cmp 0 }
-      its('gid') { should cmp expected_gid }
+      it { should be_owned_by 'root' }
+      it { should be_grouped_into expected_gid }
     end
   end
 end
@@ -222,8 +222,8 @@
   describe file('/etc/passwd-') do
     it { should exist }
     it { should_not be_more_permissive_than('0600') }
-    its('uid') { should cmp 0 }
-    its('gid') { should cmp 0 }
+    it { should be_owned_by 'root' }
+    it { should be_grouped_into 'root' }
   end
 end
 
@@ -246,8 +246,8 @@
     it { should exist }
     it { should_not be_more_permissive_than('0640') }
 
-    its('uid') { should cmp 0 }
-    its('gid') { should cmp expected_gid }
+    it { should be_owned_by 'root' }
+    it { should be_grouped_into expected_gid }
   end
 end
 
@@ -270,8 +270,8 @@
   describe file('/etc/group-') do
     it { should exist }
     it { should_not be_more_permissive_than('0644') }
-    its('uid') { should cmp 0 }
-    its('gid') { should cmp 0 }
+    it { should be_owned_by 'root' }
+    it { should be_grouped_into 'root' }
   end
 end
 
@@ -295,8 +295,8 @@
   describe file('/etc/gshadow-') do
     it { should exist }
     it { should_not be_more_permissive_than('0640') }
-    its('uid') { should cmp 0 }
-    its('gid') { should cmp expected_gid }
+    it { should be_owned_by 'root' }
+    it { should be_grouped_into expected_gid }
   end
 end
 

controls/6_2_user_and_group_settings.rb

@@ -162,7 +162,7 @@
       it { should be_directory }
       it { should_not be_writable.by 'group' }
       it { should_not be_writable.by 'other' }
-      its('uid') { should cmp 0 }
+      it { should be_owned_by 'root' }
     end
   end
 end
@@ -384,7 +384,7 @@
       describe.one do
         group_files.each do |gf|
           describe etc_group(gf) do
-            its(:gids) { should include gid }
+            it { should be_grouped_into gid }
           end
         end
       end