Tests/VM/Isolation-DeviceConnectable.Vester.ps1
|
# Test file for the Vester module - https://github.com/WahlNetwork/Vester # Called via Invoke-Pester VesterTemplate.Tests.ps1 # vSphere 6.0 Hardening Guide Guideline ID - VM.prevent-device-interaction-connect # Test title, e.g. 'DNS Servers' $Title = 'Isolation - Device Interaction Connect' # Test description: How New-VesterConfig explains this value to the user $Description = 'Prevent unauthorized users from connecting or disconnecting devices or network adapters' # The config entry stating the desired values $Desired = $cfg.vm.isolationdeviceconnectable # The test value's data type, to help with conversion: bool/string/int $Type = 'string' # The command(s) to pull the actual value for comparison # $Object will scope to the folder this test is in (Cluster, Host, etc.) [ScriptBlock]$Actual = { (Get-AdvancedSetting -Entity $Object | Where-Object -FilterScript { $_.Name -eq 'isolation.device.connectable.disable'}).Value } # The command(s) to match the environment to the config # Use $Object to help filter, and $Desired to set the correct value [ScriptBlock]$Fix = { if ((Get-AdvancedSetting -Entity $Object -Name 'isolation.device.connectable.disable') -eq $null) { New-AdvancedSetting -Entity $Object -Name 'isolation.device.connectable.disable' -Value $Desired -Confirm:$false -ErrorAction Stop } else { Get-AdvancedSetting -Entity $Object | Where-Object -FilterScript { $_.Name -eq 'isolation.device.connectable.disable' } | Set-AdvancedSetting -value $Desired -Confirm:$false -ErrorAction Stop } } |