manifests/subsystem/grsec.pp


1
2
3
4
5
6
7
8
9
10
11

class nodo::subsystem::grsec {
  include nodo::utils::security::grsec

  nodo::subsystem::sysctl::entry { 'kernel.grsecurity.rwxmap_logging':
    value => 0,
  }

  nodo::subsystem::sysctl::entry { 'kernel.grsecurity.grsec_lock':
    value => 1,
  }
}