dev-sec/postgres-baseline

Switch back to simple InSpec service description

chris-rock opened this issue · 2 comments

As highlighted in #16, the inspec test (https://github.com/dev-sec/postgres-baseline/blob/master/controls/postgres_spec.rb#L69-L73) for:

describe service(postgres.service) do
   it { should be_installed }
   it { should be_running }
   it { should be_enabled }
end

do not work well across all operating systems. We need to investigate if this is caused by docker or by inspec.

This seems to be fixed now. Please re-open if it is still a problem.

I'm adding the Ansible version of the hardening progress at dev-sec/ansible-collection-hardening#725. Unfortunately, I have this issue on both Ubuntu 20.04 and 22.04.