added Test verification for package removal #32

Signed-off-by: Patrick Meier <patrick.meier111@googlemail.com>

Author: Patrick Meier

default/inspec/package_spec.rb

@@ -0,0 +1,67 @@
+# encoding: utf-8
+#
+# Copyright 2015, Patrick Münch
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# author: Christoph Hartmann
+# author: Dominik Richter
+# author: Patrick Münch
+
+control '01' do
+  impact 1.0
+  title "Do not run deprecated inetd or xinetd"
+  desc "http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf, Chapter 3.2.1"
+  describe package('inetd') do
+    it { should_not be_installed }
+  end
+  describe package('xinetd') do
+    it { should_not be_installed }
+  end
+end
+
+control '02' do
+  impact 1.0
+  title "Do not install Telnet server"
+  desc "Telnet protocol uses unencrypted communication, that means the passowrd and other sensitive data are unencrypted. http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf, Chapter 3.2.2"
+  describe package('telnetd') do
+    it { should_not be_installed }
+  end
+end
+
+control '03' do
+  impact 1.0
+  title "Do not install rsh server"
+  desc "The r-commands suffers same problem as telnet. http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf, Chapter 3.2.3"
+  describe package('telnetd') do
+    it { should_not be_installed }
+  end
+end
+
+control '05' do
+  impact 1.0
+  title "Do not install ypserv server (NIS)"
+  desc "Network Information Service (NIS) has some security design weaknesses like inadequate protection of important authentication information. http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf, Chapter 3.2.4"
+  describe package('ypserv') do
+    it { should_not be_installed }
+  end
+end
+
+control '06' do
+  impact 1.0
+  title "Do not install tftp server"
+  desc "tftp-server provides little security http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf, Chapter 3.2.5"
+  describe package('tftp-server') do
+    it { should_not be_installed }
+  end
+end