gistfile1.txt

rule "ETSY005", "Action :restart sent to a core service" do
  tags %w{correctness recipe etsy}
  recipe do |ast, filename|
    res = ast.xpath('//command[ident/@value = "notifies"]/args_add_block[descendant::symbol/ident/@value="restart"]/descendant::method_add_arg[fcall/ident/@value="resources"]/descendant::assoc_new[symbol/ident/@value="service"]/descendant::tstring_content')
    res.each do |notifies|
      if notifies.attribute('value').to_s.include?('nscd')
        [match(res)]
      end
    end
  end
end