Addressing issue #149 (#150)

Moved the 'linux_update' resource reference out of the describe/subject block into a control-level variable. Also, generated a list of package names to pass to the 'List of out-of-date packages' block instead of the entire JSON object for cleaner output. Signed-off-by: Lesley Kimmel <[email protected]> Co-authored-by: Lesley Kimmel <[email protected]> Co-authored-by: Trevor Vaughan <[email protected]>
simp · Mar 30, 2020 · 370ba60 · 370ba60
1 parent 17d42b7
commit 370ba60
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/controls/V-71999.rb b/controls/V-71999.rb
@@ -56,14 +56,17 @@
 Vulnerability Management (IAVM) process, this is a finding."
   desc "fix", "Install the operating system patches or updated packages
 available from Red Hat within 30 days or sooner as local policy dictates."
+
+  updates = linux_update.updates
+  package_names = updates.map { |h| h['name'] }
 
   describe.one do
     describe 'List of out-of-date packages' do
-      subject { linux_update.updates }
+      subject { package_names }
       it { should be_empty }
     end
 
-    linux_update.updates.each do |update|
+    updates.each do |update|
       describe package(update['name']) do
         its('version') { should eq update['version'] }
       end