security_policy resource

Use the security_policy Chef InSpec audit resource to test security policies on the Windows platform.

Availability

This resource is distributed along with Chef InSpec itself. You can use it automatically.

This resource first became available in v1.0.0 of InSpec.

A security_policy resource block declares the name of a security policy and the value to be tested:

describe security_policy do
  its('policy_name') { should eq 'value' }
end

where

'policy_name' must specify a security policy
{ should eq 'value' } tests the value of policy_name against the value declared in the test

The following examples show how to use this Chef InSpec audit resource.

describe security_policy do
  its('SeRemoteInteractiveLogonRight') { should eq '*S-1-5-32-544' }
end

For a full list of available matchers, please visit our matchers page.

The policy_name matcher must be the name of a security policy:

its('SeNetworkLogonRight') { should eq '*S-1-5-11' }