add guard to execute

TelekomLabs-DCO-1.1-Signed-off-by: Edmund Haselwanter <[email protected]> (github: ehaselwanter)

recipes/minimize_access.rb

@@ -24,6 +24,7 @@
 paths.each do |folder|
   execute "remove write permission from #{folder}" do
     command "chmod go-w -R #{folder}"
+    not_if "find #{folder}  -perm -go+w -type f | wc -l | egrep '^0$'"
   end
 end
 

spec/recipes/default_spec.rb

@@ -27,6 +27,13 @@
       # therefore we set it manually here
       node.set['sysctl']['conf_dir'] = '/etc/sysctl.d'
       node.set['cpu']['0']['vendor_id'] = 'GenuineIntel'
+      node.set['env']['extra_user_paths'] = []
+
+      paths = %w(/usr/local/sbin /usr/local/bin /usr/sbin /usr/bin /sbin /bin) + node['env']['extra_user_paths']
+      paths.each do |folder|
+        stub_command("find #{folder}  -perm -go+w -type f | wc -l | egrep '^0$'").and_return(false)
+      end
+
     end.converge(described_recipe)
   end