Add tests

Signed-off-by: Alan Moore <alan.moore@canonical.com>

Author: alanmcanonical

linux_os/guide/system/logging/journald/dir_groupowner_system_journal/rule.yml

@@ -21,13 +21,17 @@ severity: medium
 
 fixtext: |
     Configure the system to set the appropriate ownership to the directories
-    used by the systemd journal. Add or modify the following lines in the
-    "/usr/lib/tmpfiles.d/systemd.conf" file:
+    used by the systemd journal.
+    Create a drop-in file if it does not already exist with the following command:
+    <pre>
+    $ sudo vi /etc/tmpfiles.d/zzz-systemd-stig.conf
+    </pre>
+    Add or modify the following lines in the "/usr/lib/tmpfiles.d/zzz-systemd-stig.conf" file:
     <pre>
     z /run/log/journal 2640 root systemd-journal - -
     z /var/log/journal 2640 root systemd-journal - -
     </pre>
-    Restart the system for the changes to take effect.
+    Note: Restart the system for the changes to take effect.
 
 template:
     name: file_groupowner

linux_os/guide/system/logging/journald/dir_groupowner_system_journal/tests/correct_groupowner.pass.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+# platform = multi_platform_ubuntu
+
+getent group "systemd-journal" &>/dev/null || groupadd systemd-journal
+
+mkdir -p /run/log/journal /var/log/journal
+chgrp -R systemd-journal /run/log/journal /var/log/journal

linux_os/guide/system/logging/journald/dir_groupowner_system_journal/tests/incorrect_groupowner.fail.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+# platform = multi_platform_ubuntu
+
+getent group "systemd-journal" &>/dev/null || groupadd systemd-journal
+
+mkdir -p /run/log/journal /var/log/journal
+mkdir -p /var/log/journal/wrong_group_dir
+chgrp -R systemd-journal /run/log/journal /var/log/journal
+chgrp -R nogroup /var/log/journal/wrong_group_dir

linux_os/guide/system/logging/journald/dir_groupowner_system_journal/tests/nested_subdir_groupowner.fail.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+# platform = multi_platform_ubuntu
+
+getent group "systemd-journal" &>/dev/null || groupadd systemd-journal
+
+machine_id="$(cat /etc/machine-id)"
+mkdir -p "/run/log/journal/${machine_id}/nested/deeper"
+mkdir -p "/var/log/journal/${machine_id}/nested/deeper"
+
+chgrp nogroup "/run/log/journal/${machine_id}/nested/deeper"
+chgrp nogroup "/var/log/journal/${machine_id}/nested/deeper"

linux_os/guide/system/logging/journald/dir_groupowner_system_journal/tests/no_file.pass.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+# platform = multi_platform_ubuntu
+
+getent group "systemd-journal" &>/dev/null || groupadd systemd-journal
+
+mkdir -p /run/log/journal /var/log/journal
+chgrp systemd-journal /run/log/journal /var/log/journal

linux_os/guide/system/logging/journald/dir_owner_system_journal/tests/correct_owner.pass.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+# platform = multi_platform_ubuntu
+
+mkdir -p /run/log/journal /var/log/journal
+chown -R root /run/log/journal /var/log/journal

linux_os/guide/system/logging/journald/dir_owner_system_journal/tests/incorrect_owner.fail.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+# platform = multi_platform_ubuntu
+
+useradd testuser_123
+
+mkdir -p /run/log/journal /var/log/journal
+mkdir -p /run/log/journal/wrong_owner_dir
+chown -R testuser_123 /run/log/journal/wrong_owner_dir

linux_os/guide/system/logging/journald/dir_owner_system_journal/tests/nested_subdir_owner.fail.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+# platform = multi_platform_ubuntu
+
+id testuser_123 &>/dev/null || useradd testuser_123
+
+machine_id="$(cat /etc/machine-id)"
+mkdir -p "/run/log/journal/${machine_id}/nested/deeper"
+mkdir -p "/var/log/journal/${machine_id}/nested/deeper"
+
+chown testuser_123 "/run/log/journal/${machine_id}/nested/deeper"
+chown testuser_123 "/var/log/journal/${machine_id}/nested/deeper"

linux_os/guide/system/logging/journald/dir_owner_system_journal/tests/no_file.pass.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+# platform = multi_platform_ubuntu
+
+mkdir -p /run/log/journal /var/log/journal
+chown root /run/log/journal /var/log/journal

linux_os/guide/system/logging/journald/dir_permissions_system_journal/tests/correct_permissions.pass.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+# platform = multi_platform_ubuntu
+
+mkdir -p /run/log/journal /var/log/journal
+find /run/log/journal /var/log/journal -type d -exec chmod 2750 {} \;