aboutsummaryrefslogtreecommitdiff
path: root/manifests/subsystem
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2016-12-29 11:04:38 -0200
committerSilvio Rhatto <rhatto@riseup.net>2016-12-29 11:04:38 -0200
commit53ad32e8f08124f9ac837df091f61adf685775a8 (patch)
tree40659e1aef2c6569b2a5fa23af3040cfd43f7394 /manifests/subsystem
parent5999eb45ed41ca37e601ab79a4827d5cffb08b74 (diff)
downloadpuppet-nodo-53ad32e8f08124f9ac837df091f61adf685775a8.tar.gz
puppet-nodo-53ad32e8f08124f9ac837df091f61adf685775a8.tar.bz2
Adds nodo::subsystem::grsec
Diffstat (limited to 'manifests/subsystem')
-rw-r--r--manifests/subsystem/grsec.pp11
1 files changed, 11 insertions, 0 deletions
diff --git a/manifests/subsystem/grsec.pp b/manifests/subsystem/grsec.pp
new file mode 100644
index 0000000..185454f
--- /dev/null
+++ b/manifests/subsystem/grsec.pp
@@ -0,0 +1,11 @@
+class nodo::subsystem::grsec {
+ include nodo::utils::security::grsec
+
+ nodo::subsystem::sysctl::entry { 'kernel.grsecurity.rwxmap_logging':
+ value => 0,
+ }
+
+ nodo::subsystem::sysctl::entry { 'kernel.grsecurity.grsec_lock':
+ value => 1,
+ }
+}