ssh-baseline
ssh-baseline copied to clipboard
Manage default value vs Match block
Currently if there are Match blocks containing an option, inspec will return an array
for example
[0;32m "\u001b[38;5;9m × sshd-39: Server: Disable TCP forwarding", [0m
[0;32m "\u001b[38;5;9m × SSHD Configuration AllowTcpForwarding should eq \"no\"", [0m
[0;32m " ", [0m
[0;32m " expected: \"no\"", [0m
[0;32m " got: [\"no\", \"yes\", \"no\", \"no\", \"yes\", \"no\"]", [0m
ideally it should be possible to match default config value (the one outside of any Match block or inside a 'Match all') and the one per Match rule string.
tested on 2.2.78-1