ruby Secedit.exe自定义资源示例

Posted 2021-05-15

resource_name :security_policy

default_action :configure

property :policy_template, String, required: false, default: 'C:\Windows\security\templates\chefNewPolicy.inf'
property :database, String, required: false, default: 'C:\Windows\security\database\chef.sdb'
property :log_location, String, default: 'C:\Windows\security\logs\chef-secedit.log'

action :configure do
  if node['platform'] == 'windows'
    template "#{policy_template}" do
      source 'policy.inf.erb'
      cookbook 'windows-security-policy'
      action :create
    end
    execute 'Configure security database' do
      command "Secedit /configure /db #{database} /cfg #{policy_template} /log #{log_location}"
      live_stream true
      action :run
    end
  else
    Chef::Log.info "#{@current_resource} is only for a Windows platform"
  end
end