net.ipv4.ip_forward needs to be '1' on docker hosts

[KZachariassen]

Hi,

Running docker on a host, would need the net.ipv4.ip_forward to be '1' and that would make this test fail. Is there any way to work around that? I would really like a solution where I don't have to fork this module and maintain a copy my self.

linux-baseline/controls/sysctl_spec.rb

Line 33 in 1233a13

describe kernel_parameter('net.ipv4.ip_forward') do

[chris-rock]

@krjensen you could easily contribute a new variable https://github.com/dev-sec/linux-baseline/blob/master/controls/sysctl_spec.rb#L343-L345. Otherwise InSpec offers an override mechanism where you could just overwrite specific controls to avoid the need of a fork.

[KZachariassen]

@chris-rock Than you for the feedback, I closed the issues because I found out that I could simply add it to an input-file and use --input-file inspec/input.yml as argument to inspec exec