Version information
Start using this module
Add this module to your Puppetfile:
mod 'shearn89-toughen', '0.2.0'Learn more about managing modules with a PuppetfileDocumentation
toughen
Table of Contents
- Description
- Setup - The basics of getting started with toughen
- Usage - Configuration options and additional functionality
- Reference - An under-the-hood peek at what the module is doing and how
- Limitations - OS compatibility, etc.
- Development - Guide for contributing to the module
Description
This is a puppet module that applies various hardening controls as detailed in
the documents referenced in guides.txt.
The aim of me writing my own module is to lay out the controls in a manner that I feel is readable and easy to understand, whilst also providing flexibility to the user so that they can add exceptions where necessary.
First priority for development will be CentOS 7, followed by RHEL7. Then the version 6 of both those, followed by Ubuntu and Debian. Other Linux OS's will follow in good time.
Setup
What toughen affects OPTIONAL
A range from everything to nothing - it's server hardening. If you're unaware what that involves I strongly recommend you read the guides.
Beginning with toughen
TODO The very basic steps needed for a user to get the module up and running. This can include setup steps, if necessary, or it can be an example of the most basic use of the module.
Usage
TODO This section is where you describe how to customize, configure, and do the fancy stuff with your module here. It's especially helpful if you include usage examples and code samples for doing things with your module.
Reference
TODO Here, include a complete list of your module's classes, types, providers, facts, along with the parameters for each. Users refer to this section (thus the name "Reference") to find specific details; most users don't read it per se.
Limitations
TODO This is where you list OS compatibility, version compatibility, etc. If there are Known Issues, you might want to include them under their own heading here.
Development
TODO Since your module is awesome, other users will want to play with it. Let them know what the ground rules for contributing are.
Change Log
All notable changes to the project will be documented in this file. This project adheres to Semantic Versioning.
[0.2.0] - 2017-05-03
- Adds in a custom fact that finds binaries with the setuid flag, and tracks them under auditd.
- 100% STIG compliance for Auditd, the 'Systme Accounting with auditd' section.
[0.1.2] - 2017-05-03
- Forgot to bump the metadata.json version to match the tag. Doh!
[0.1.1] - 2017-05-03
- Tweaks to auditing class to meet STIG compliance standards with oscap scanner
[0.1.0] - 2017-05-03
- Tag for initial usage
[0.0.0] - 2016-06-16
Added
- Initial bare commit
Dependencies
The MIT License (MIT) Copyright (c) 2016 Alex Shearn Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.