From 53ad32e8f08124f9ac837df091f61adf685775a8 Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Thu, 29 Dec 2016 11:04:38 -0200
Subject: Adds nodo::subsystem::grsec

---
 manifests/subsystem/grsec.pp | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 manifests/subsystem/grsec.pp

(limited to 'manifests/subsystem')

diff --git a/manifests/subsystem/grsec.pp b/manifests/subsystem/grsec.pp
new file mode 100644
index 0000000..185454f
--- /dev/null
+++ b/manifests/subsystem/grsec.pp
@@ -0,0 +1,11 @@
+class nodo::subsystem::grsec {
+  include nodo::utils::security::grsec
+
+  nodo::subsystem::sysctl::entry { 'kernel.grsecurity.rwxmap_logging':
+    value => 0,
+  }
+
+  nodo::subsystem::sysctl::entry { 'kernel.grsecurity.grsec_lock':
+    value => 1,
+  }
+}
-- 
cgit v1.2.3