Adds nodo::subsystem::grsec

1 files changed, 13 insertions, 0 deletions

diff --git a/manifests/utils/security/grsec.pp b/manifests/utils/security/grsec.pp
new file mode 100644
index 0000000..c978088
--- /dev/null
+++ b/manifests/utils/security/grsec.pp
@@ -0,0 +1,13 @@
+class nodo::utils::security::grsec {
+  package { [
+    # The package with the specific image version might not be used
+    # but right now apt is complaining of unmet dependencies when
+    # trying to install only the metapackage maybe because both are
+    # on jessie-backports. This might chance in the near future.
+    'linux-image-4.7.0-1-grsec-amd64',
+    'linux-image-grsec-amd64',
+    'paxtest',
+  ]:
+    ensure => present,
+  }
+}