class Inspec::Resources::LinuxAuditSystem

def rules

The auditctl -l list all rules, 1 per line.
The rules property returns the array of audit rules obtained on auditctl -l.

def rules
  auditctl_cmd = inspec.command("#{auditctl_utility} -l")
  raise Inspec::Exceptions::ResourceFailed, "Executing #{auditctl_utility} -l: #{auditctl_cmd.stderr}" if auditctl_cmd.exit_status.to_i != 0
  auditctl_cmd.stdout.strip.split("\n")
end

Instance Methods