Merge pull request #322 from accurics/revert-321-bugfix/fix-checkIpFo…

…rward-rule Revert "fixed a bug in checkIpForward"
tenable · Sep 14, 2020 · cbe6c35 · cbe6c35
2 parents 67e42be + f107f76
commit cbe6c35
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 9 deletions.
diff --git a/pkg/policies/opa/rego/gcp/google_compute_instance/accurics.gcp.NS.130.json b/pkg/policies/opa/rego/gcp/google_compute_instance/accurics.gcp.NS.130.json
@@ -1,13 +1,10 @@
 {
     "name": "checkIpForward",
     "file": "checkIpForward.rego",
-    "template_args": {
-        "prefix":"",
-        "suffix":""
-    },
+    "template_args": null,
     "severity": "MEDIUM",
     "description": "Ensure IP forwarding is not enabled on Instances.",
     "reference_id": "accurics.gcp.NS.130",
     "category": "Network Security",
     "version": 1
-}
+}
diff --git a/pkg/policies/opa/rego/gcp/google_compute_instance/checkIpForward.rego b/pkg/policies/opa/rego/gcp/google_compute_instance/checkIpForward.rego
@@ -1,8 +1,7 @@
 package accurics
 
-{{.prefix}}{{.name}}{{.suffix}}[api.id]
+checkIpForward[api.id]
 {
      api := input.google_compute_instance[_]
-     api.config.can_ip_forward == true
-}
-
+     not api.config.can_ip_forward == true
+}