diff options
author | Silvio Rhatto <rhatto@riseup.net> | 2017-02-09 18:53:21 -0200 |
---|---|---|
committer | Silvio Rhatto <rhatto@riseup.net> | 2017-02-09 18:53:21 -0200 |
commit | 6a10906110a915a0a662566b5b400b7afe69c668 (patch) | |
tree | 5455210a630aaa0933096245ca024b9f3e403409 /manifests/subsystem/security.pp | |
parent | be151b179704537c5c435518b5a71f3e38c8878f (diff) | |
download | puppet-nodo-6a10906110a915a0a662566b5b400b7afe69c668.tar.gz puppet-nodo-6a10906110a915a0a662566b5b400b7afe69c668.tar.bz2 |
Updates grsec config, adding nodo::subsystem::security and nodo::subsystem::grsec::paxctl
Diffstat (limited to 'manifests/subsystem/security.pp')
-rw-r--r-- | manifests/subsystem/security.pp | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/manifests/subsystem/security.pp b/manifests/subsystem/security.pp new file mode 100644 index 0000000..faf00bb --- /dev/null +++ b/manifests/subsystem/security.pp @@ -0,0 +1,11 @@ +# Basic security measures +class nodo::subsystem::security { + # Ensure a modest permission for this place + # Frameworks like grsecurity might complain otherwise + file { '/usr/local/bin': + ensure => directory, + owner => "root", + group => "root", + mode => "0755", + } +} |