aboutsummaryrefslogtreecommitdiff
path: root/manifests/subsystem/security.pp
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2017-02-09 18:53:21 -0200
committerSilvio Rhatto <rhatto@riseup.net>2017-02-09 18:53:21 -0200
commit6a10906110a915a0a662566b5b400b7afe69c668 (patch)
tree5455210a630aaa0933096245ca024b9f3e403409 /manifests/subsystem/security.pp
parentbe151b179704537c5c435518b5a71f3e38c8878f (diff)
downloadpuppet-nodo-6a10906110a915a0a662566b5b400b7afe69c668.tar.gz
puppet-nodo-6a10906110a915a0a662566b5b400b7afe69c668.tar.bz2
Updates grsec config, adding nodo::subsystem::security and nodo::subsystem::grsec::paxctl
Diffstat (limited to 'manifests/subsystem/security.pp')
-rw-r--r--manifests/subsystem/security.pp11
1 files changed, 11 insertions, 0 deletions
diff --git a/manifests/subsystem/security.pp b/manifests/subsystem/security.pp
new file mode 100644
index 0000000..faf00bb
--- /dev/null
+++ b/manifests/subsystem/security.pp
@@ -0,0 +1,11 @@
+# Basic security measures
+class nodo::subsystem::security {
+ # Ensure a modest permission for this place
+ # Frameworks like grsecurity might complain otherwise
+ file { '/usr/local/bin':
+ ensure => directory,
+ owner => "root",
+ group => "root",
+ mode => "0755",
+ }
+}