Files
railiance-infra/reports/goss-Railiance01-2026-03-09T164350Z.tap

27 lines
2.0 KiB
Plaintext

1..26
ok 1 - Command: test -x /usr/local/bin/age: exit-status: matches expectation: 0
ok 2 - Command: test -x /usr/local/bin/sops: exit-status: matches expectation: 0
ok 3 - Package: ufw: installed: matches expectation: true
ok 4 - Package: htop: installed: matches expectation: true
ok 5 - Command: grep NOPASSWD /etc/sudoers.d/tegwick: exit-status: matches expectation: 0
ok 6 - Command: grep NOPASSWD /etc/sudoers.d/tegwick: stdout: matches expectation: ["NOPASSWD"]
ok 7 - Command: grep -r HISTCONTROL /etc/profile.d/: exit-status: matches expectation: 0
ok 8 - Command: grep -r HISTCONTROL /etc/profile.d/: stdout: matches expectation: ["ignorespace"]
ok 9 - File: /etc/ssh/sshd_config.d/10-hardening.conf: exists: matches expectation: true
ok 10 - File: /etc/ssh/sshd_config.d/10-hardening.conf: contents: matches expectation: ["PermitRootLogin no","PasswordAuthentication no","PubkeyAuthentication yes"]
ok 11 - User: tegwick: exists: matches expectation: true
ok 12 - User: tegwick: shell: matches expectation: "/bin/bash"
ok 13 - Package: fail2ban: installed: matches expectation: true
ok 14 - Service: ssh.socket: enabled: matches expectation: true
ok 15 - Service: ssh.socket: running: matches expectation: true
ok 16 - Package: curl: installed: matches expectation: true
ok 17 - Package: vim: installed: matches expectation: true
ok 18 - Service: ufw: enabled: matches expectation: true
ok 19 - Service: ufw: running: matches expectation: true
ok 20 - Service: fail2ban: enabled: matches expectation: true
ok 21 - Service: fail2ban: running: matches expectation: true
ok 22 - Package: git: installed: matches expectation: true
ok 23 - Command: ufw status: exit-status: matches expectation: 0
ok 24 - Command: ufw status: stdout: matches expectation: ["Status: active","/OpenSSH.*ALLOW/","/6443\\/tcp.*ALLOW/","/8472\\/udp.*ALLOW/"]
ok 25 - Command: fail2ban-client status sshd: exit-status: matches expectation: 0
ok 26 - Command: fail2ban-client status sshd: stdout: matches expectation: ["Status for the jail: sshd"]