mitre-inspec

A new approach from V-73509 from Windows Server 2016 can be followed for V-93241

Update controls to use desc for check and fix as per the new inspec style

locking inspec_version

Several controls are performing a mode check on files using

its('mode') { should cmp '0750' }

This should to changed to cmp <= instead of just cmp, so that the control will still pass if the mode set is more restrictive.

The following controls are affected:

• M-4.1
• M-4.11
• M-4.12
• M-4.13
• M-4.14
• M-4.2
• M-4.3
• M-4.4
• M-4.5
• M-4.6
• M-4.7
• M-4.8
• M-4.9