Libraries
»
enterprisemodules-linux_secured
(0.2.0)
Documentation for enterprisemodules-linux_secured (0.2.0)
Alphabetic Index
Puppet Class Listing A-Z
L
linux_secured::clear_caches
linux_secured::fact_caching
linux_secured::internal::gdm_config
linux_secured::internal::refresh_audit_daemon
linux_secured::internal::refresh_journal_daemon
Defined Type Listing A-Z
L
linux_secured::controls::a_web_server_is_not_installed
linux_secured::controls::access_to_the_su_command_is_restricted
linux_secured::controls::actions_as_another_user_are_always_logged
linux_secured::controls::address_space_layout_randomization_aslr_is_enabled
linux_secured::controls::aide_is_installed
linux_secured::controls::all_groups_in_etc_passwd_exist_in_etc_group
linux_secured::controls::all_users_home_directories_exist
linux_secured::controls::all_users_last_password_change_date_is_in_the_past
linux_secured::controls::an_nftables_table_exists
linux_secured::controls::at_is_restricted_to_authorized_users
linux_secured::controls::audit_backlog_limit_is_sufficient
linux_secured::controls::audit_configuration_is_immutable
linux_secured::controls::audit_log_storage_size_is_configured
linux_secured::controls::audit_logs_are_not_automatically_deleted
linux_secured::controls::auditd_is_installed
linux_secured::controls::auditd_service_is_enabled
linux_secured::controls::auditing_for_processes_that_start_prior_to_auditd_is_enabled
linux_secured::controls::authentication_is_required_when_booting_into_rescue_mode
linux_secured::controls::authselect_includes_with_faillock
linux_secured::controls::automatic_mounting_of_removable_media_is_disabled
linux_secured::controls::avahi_server_is_not_installed
linux_secured::controls::bogus_icmp_responses_are_ignored
linux_secured::controls::bootloader_password_is_set
linux_secured::controls::broadcast_icmp_requests_are_ignored
linux_secured::controls::changes_to_system_administration_scope_sudoers_is_collected
linux_secured::controls::chrony_is_configured
linux_secured::controls::core_dump_backtraces_are_disabled
linux_secured::controls::core_dump_storage_is_disabled
linux_secured::controls::cron_daemon_is_enabled
linux_secured::controls::cron_is_restricted_to_authorized_users
linux_secured::controls::cups_is_not_installed
linux_secured::controls::dccp_is_disabled
linux_secured::controls::default_group_for_the_root_account_is_gid_0
linux_secured::controls::default_user_shell_timeout_is_900_seconds_or_less
linux_secured::controls::default_user_umask_is_027_or_more_restrictive
linux_secured::controls::dhcp_server_is_not_installed
linux_secured::controls::disable_automounting
linux_secured::controls::disable_usb_storage
linux_secured::controls::discretionary_access_control_permission_modification_events_are_collected
linux_secured::controls::dns_server_is_not_installed
linux_secured::controls::events_that_modify_date_and_time_information_are_collected
linux_secured::controls::events_that_modify_the_sudo_log_file_are_collected
linux_secured::controls::events_that_modify_the_systems_mandatory_access_controls_are_collected
linux_secured::controls::events_that_modify_the_systems_network_environment_are_collected
linux_secured::controls::events_that_modify_user_group_information_are_collected
linux_secured::controls::file_deletion_events_by_users_are_collected
linux_secured::controls::filesystem_integrity_is_regularly_checked
linux_secured::controls::firewalld_default_zone_is_set
linux_secured::controls::firewalld_is_either_not_installed_or_masked_with_iptables
linux_secured::controls::firewalld_is_either_not_installed_or_masked_with_nftables
linux_secured::controls::firewalld_is_installed
linux_secured::controls::firewalld_service_enabled_and_running
linux_secured::controls::ftp_server_is_not_installed
linux_secured::controls::gdm_login_banner_is_configured
linux_secured::controls::gpgcheck_is_globally_activated
linux_secured::controls::grpquota_option_set_on_home_partition
linux_secured::controls::http_proxy_server_is_not_installed
linux_secured::controls::icmp_redirects_are_not_accepted
linux_secured::controls::imap_and_pop3_server_is_not_installed
linux_secured::controls::inactive_password_lock_is_30_days_or_less
linux_secured::controls::ip6tables_default_deny_firewall_policy
linux_secured::controls::ip6tables_firewall_rules_exist_for_all_open_ports
linux_secured::controls::ip6tables_is_enabled_and_active
linux_secured::controls::ip6tables_loopback_traffic_is_configured
linux_secured::controls::ip6tables_rules_are_saved
linux_secured::controls::ip_forwarding_is_disabled
linux_secured::controls::iptables_default_deny_firewall_policy
linux_secured::controls::iptables_is_enabled_and_active
linux_secured::controls::iptables_loopback_traffic_is_configured
linux_secured::controls::iptables_packages_are_installed
linux_secured::controls::iptables_rules_are_saved
linux_secured::controls::iptables_rules_exist_for_all_open_ports
linux_secured::controls::iptables_services_not_installed_with_firewalld
linux_secured::controls::iptables_services_not_installed_with_nftables
linux_secured::controls::ipv6_router_advertisements_are_not_accepted
linux_secured::controls::journald_is_configured_to_compress_large_log_files
linux_secured::controls::journald_is_configured_to_write_logfiles_to_persistent_disk
linux_secured::controls::journald_is_not_configured_to_receive_logs_from_a_remote_client
linux_secured::controls::journald_is_not_configured_to_recieve_logs_from_a_remote_client
linux_secured::controls::journald_service_is_enabled
linux_secured::controls::kernel_module_loading_unloading_and_modification_is_collected
linux_secured::controls::last_logged_in_user_display_is_disabled
linux_secured::controls::ldap_client_is_not_installed
linux_secured::controls::local_login_warning_banner_is_configured_properly
linux_secured::controls::lockout_for_failed_password_attempts_is_configured
linux_secured::controls::login_and_logout_events_are_collected
linux_secured::controls::mail_transfer_agent_is_configured_for_local_only_mode
linux_secured::controls::mcs_translation_service_mcstrans_is_not_installed
linux_secured::controls::message_of_the_day_is_configured_properly
linux_secured::controls::minimum_days_between_password_changes_is_7_or_more
linux_secured::controls::mounting_of_cramfs_filesystems_is_disabled
linux_secured::controls::mounting_of_squashfs_filesystems_is_disabled
linux_secured::controls::mounting_of_udf_filesystems_is_disabled
linux_secured::controls::net_snmp_is_not_installed
linux_secured::controls::nfs_utils_is_not_installed_or_the_nfs_server_service_is_masked
linux_secured::controls::nftables_base_chains_exist
linux_secured::controls::nftables_default_deny_firewall_policy
linux_secured::controls::nftables_either_not_installed_or_masked_with_firewalld
linux_secured::controls::nftables_is_installed
linux_secured::controls::nftables_is_not_installed_with_iptables
linux_secured::controls::nftables_loopback_traffic_is_configured
linux_secured::controls::nftables_rules_are_permanent
linux_secured::controls::nftables_service_is_enabled
linux_secured::controls::nis_client_is_not_installed
linux_secured::controls::nis_server_is_not_installed
linux_secured::controls::no_duplicate_gids_exist
linux_secured::controls::no_duplicate_group_names_exist
linux_secured::controls::no_duplicate_uids_exist
linux_secured::controls::no_duplicate_user_names_exist
linux_secured::controls::no_unconfined_services_exist
linux_secured::controls::no_ungrouped_files_or_directories_exist
linux_secured::controls::no_unowned_files_or_directories_exist
linux_secured::controls::no_users_have_forward_files
linux_secured::controls::no_users_have_netrc_files
linux_secured::controls::no_users_have_rhosts_files
linux_secured::controls::no_world_writable_files_exist
linux_secured::controls::nodev_option_set_on_dev_shm_partition
linux_secured::controls::nodev_option_set_on_home_partition
linux_secured::controls::nodev_option_set_on_tmp_partition
linux_secured::controls::nodev_option_set_on_var_log_audit_partition
linux_secured::controls::nodev_option_set_on_var_log_partition
linux_secured::controls::nodev_option_set_on_var_partition
linux_secured::controls::nodev_option_set_on_var_tmp_partition
linux_secured::controls::noexec_option_set_on_dev_shm_partition
linux_secured::controls::noexec_option_set_on_tmp_partition
linux_secured::controls::noexec_option_set_on_var_log_audit_partition
linux_secured::controls::noexec_option_set_on_var_log_partition
linux_secured::controls::noexec_option_set_on_var_partition
linux_secured::controls::noexec_option_set_on_var_tmp_partition
linux_secured::controls::nosuid_option_set_on_dev_shm_partition
linux_secured::controls::nosuid_option_set_on_home_partition
linux_secured::controls::nosuid_option_set_on_tmp_partition
linux_secured::controls::nosuid_option_set_on_var_log_audit_partition
linux_secured::controls::nosuid_option_set_on_var_log_partition
linux_secured::controls::nosuid_option_set_on_var_partition
linux_secured::controls::nosuid_option_set_on_var_tmp_partition
linux_secured::controls::packet_redirect_sending_is_disabled
linux_secured::controls::password_creation_requirements_are_configured
linux_secured::controls::password_expiration_is_365_days_or_less
linux_secured::controls::password_expiration_warning_days_is_7_or_more
linux_secured::controls::password_fields_are_not_empty
linux_secured::controls::password_hashing_algorithm_is_sha_512
linux_secured::controls::password_reuse_is_limited
linux_secured::controls::permissions_on_all_logfiles_are_configured
linux_secured::controls::permissions_on_bootloader_config_are_configured
linux_secured::controls::permissions_on_etc_cron_d_are_configured
linux_secured::controls::permissions_on_etc_cron_daily_are_configured
linux_secured::controls::permissions_on_etc_cron_hourly_are_configured
linux_secured::controls::permissions_on_etc_cron_monthly_are_configured
linux_secured::controls::permissions_on_etc_cron_weekly_are_configured
linux_secured::controls::permissions_on_etc_crontab_are_configured
linux_secured::controls::permissions_on_etc_group_are_configured
linux_secured::controls::permissions_on_etc_group_minus_are_configured
linux_secured::controls::permissions_on_etc_gshadow_are_configured
linux_secured::controls::permissions_on_etc_gshadow_minus_are_configured
linux_secured::controls::permissions_on_etc_issue_are_configured
linux_secured::controls::permissions_on_etc_issue_net_are_configured
linux_secured::controls::permissions_on_etc_motd_are_configured
linux_secured::controls::permissions_on_etc_passwd_are_configured
linux_secured::controls::permissions_on_etc_passwd_minus_are_configured
linux_secured::controls::permissions_on_etc_shadow_are_configured
linux_secured::controls::permissions_on_etc_shadow_minus_are_configured
linux_secured::controls::permissions_on_etc_ssh_sshd_config_are_configured
linux_secured::controls::permissions_on_ssh_private_host_key_files_are_configured
linux_secured::controls::permissions_on_ssh_public_host_key_files_are_configured
linux_secured::controls::re_authentication_for_privilege_escalation_is_not_disabled_globally
linux_secured::controls::remote_login_warning_banner_is_configured_properly
linux_secured::controls::reverse_path_filtering_is_enabled
linux_secured::controls::root_is_the_only_uid_0_account
linux_secured::controls::root_path_integrity
linux_secured::controls::rpcbind_is_not_installed_or_the_rpcbind_services_are_masked
linux_secured::controls::rsh_client_is_not_installed
linux_secured::controls::rsync_is_not_installed_or_the_rsyncd_service_is_masked
linux_secured::controls::rsyslog_default_file_permissions_are_configured
linux_secured::controls::rsyslog_is_installed
linux_secured::controls::rsyslog_is_not_configured_to_receive_logs_from_a_remote_client
linux_secured::controls::rsyslog_is_not_configured_to_recieve_logs_from_a_remote_client
linux_secured::controls::rsyslog_service_is_enabled
linux_secured::controls::samba_is_not_installed
linux_secured::controls::sctp_is_disabled
linux_secured::controls::secure_icmp_redirects_are_not_accepted
linux_secured::controls::selinux_is_installed
linux_secured::controls::selinux_is_not_disabled_in_bootloader_configuration
linux_secured::controls::selinux_mode_is_enforcing
linux_secured::controls::selinux_mode_is_not_disabled
linux_secured::controls::selinux_policy_is_configured
linux_secured::controls::separate_partition_exists_for_home
linux_secured::controls::separate_partition_exists_for_var
linux_secured::controls::separate_partition_exists_for_var_log
linux_secured::controls::separate_partition_exists_for_var_log_audit
linux_secured::controls::separate_partition_exists_for_var_tmp
linux_secured::controls::session_initiation_information_is_collected
linux_secured::controls::setroubleshoot_is_not_installed
linux_secured::controls::source_routed_packets_are_not_accepted
linux_secured::controls::ssh_access_is_limited
linux_secured::controls::ssh_allowtcpforwarding_is_disabled
linux_secured::controls::ssh_hostbasedauthentication_is_disabled
linux_secured::controls::ssh_idle_timeout_interval_is_configured
linux_secured::controls::ssh_ignorerhosts_is_enabled
linux_secured::controls::ssh_logingracetime_is_set_to_one_minute_or_less
linux_secured::controls::ssh_loglevel_is_appropriate
linux_secured::controls::ssh_maxauthtries_is_set_to_4_or_less
linux_secured::controls::ssh_maxsessions_is_set_to_10_or_less
linux_secured::controls::ssh_maxstartups_is_configured
linux_secured::controls::ssh_pam_is_enabled
linux_secured::controls::ssh_permitemptypasswords_is_disabled
linux_secured::controls::ssh_permituserenvironment_is_disabled
linux_secured::controls::ssh_root_login_is_disabled
linux_secured::controls::ssh_warning_banner_is_configured
linux_secured::controls::ssh_x11_forwarding_is_disabled
linux_secured::controls::sticky_bit_is_set_on_all_world_writable_directories
linux_secured::controls::successful_and_unsuccessful_attempts_to_use_the_chacl_command_are_recorded
linux_secured::controls::successful_and_unsuccessful_attempts_to_use_the_chcon_command_are_recorded
linux_secured::controls::successful_and_unsuccessful_attempts_to_use_the_setfacl_command_are_recorded
linux_secured::controls::successful_and_unsuccessful_attempts_to_use_the_usermod_command_are_recorded
linux_secured::controls::successful_file_system_mounts_are_collected
linux_secured::controls::sudo_authentication_timeout_is_configured_correctly
linux_secured::controls::sudo_commands_use_pty
linux_secured::controls::sudo_is_installed
linux_secured::controls::sudo_log_file_exists
linux_secured::controls::suspicious_packets_are_logged
linux_secured::controls::system_accounts_are_secured
linux_secured::controls::system_is_disabled_when_audit_logs_are_full
linux_secured::controls::system_wide_crypto_policy_is_not_legacy
linux_secured::controls::system_wide_crypto_policy_is_not_over_ridden
linux_secured::controls::systemd_journal_remote_is_installed
linux_secured::controls::talk_client_is_not_installed
linux_secured::controls::tcp_syn_cookies_is_enabled
linux_secured::controls::telnet_client_is_not_installed
linux_secured::controls::telnet_server_is_not_installed
linux_secured::controls::tftp_client_is_not_installed
linux_secured::controls::tftp_server_is_not_installed
linux_secured::controls::time_synchronization_is_in_use
linux_secured::controls::tmp_is_a_separate_partition
linux_secured::controls::unsuccessful_file_access_attempts_are_collected
linux_secured::controls::use_of_privileged_commands_are_collected
linux_secured::controls::users_dot_files_are_not_group_or_world_writable
linux_secured::controls::users_home_directories_permissions_are_750_or_more_restrictive
linux_secured::controls::users_must_provide_password_for_escalation
linux_secured::controls::users_netrc_files_are_not_group_or_world_accessible
linux_secured::controls::users_own_their_home_directories
linux_secured::controls::usrquota_option_set_on_home_partition
linux_secured::controls::vsftp_server_is_not_installed
linux_secured::controls::wireless_interfaces_are_disabled
linux_secured::controls::xdmcp_is_not_enabled
linux_secured::controls::xinetd_is_not_installed
linux_secured::controls::xorg_x11_server_common_is_not_installed
linux_secured::ensure_cis
linux_secured::ensure_set
linux_secured::ensure_stig
linux_secured::internal::disable_module
linux_secured::internal::validate_module
linux_secured::internal::validate_mount_option
linux_secured::validators::a_web_server_is_not_installed
linux_secured::validators::access_to_the_su_command_is_restricted
linux_secured::validators::actions_as_another_user_are_always_logged
linux_secured::validators::address_space_layout_randomization_aslr_is_enabled
linux_secured::validators::aide_is_installed
linux_secured::validators::all_groups_in_etc_passwd_exist_in_etc_group
linux_secured::validators::all_users_home_directories_exist
linux_secured::validators::all_users_last_password_change_date_is_in_the_past
linux_secured::validators::an_nftables_table_exists
linux_secured::validators::at_is_restricted_to_authorized_users
linux_secured::validators::audit_backlog_limit_is_sufficient
linux_secured::validators::audit_configuration_is_immutable
linux_secured::validators::audit_log_storage_size_is_configured
linux_secured::validators::audit_logs_are_not_automatically_deleted
linux_secured::validators::auditd_is_installed
linux_secured::validators::auditd_service_is_enabled
linux_secured::validators::auditing_for_processes_that_start_prior_to_auditd_is_enabled
linux_secured::validators::authentication_is_required_when_booting_into_rescue_mode
linux_secured::validators::authselect_includes_with_faillock
linux_secured::validators::automatic_mounting_of_removable_media_is_disabled
linux_secured::validators::avahi_server_is_not_installed
linux_secured::validators::bogus_icmp_responses_are_ignored
linux_secured::validators::bootloader_password_is_set
linux_secured::validators::broadcast_icmp_requests_are_ignored
linux_secured::validators::changes_to_system_administration_scope_sudoers_is_collected
linux_secured::validators::chrony_is_configured
linux_secured::validators::core_dump_backtraces_are_disabled
linux_secured::validators::core_dump_storage_is_disabled
linux_secured::validators::cron_daemon_is_enabled
linux_secured::validators::cron_is_restricted_to_authorized_users
linux_secured::validators::cups_is_not_installed
linux_secured::validators::dccp_is_disabled
linux_secured::validators::default_group_for_the_root_account_is_gid_0
linux_secured::validators::default_user_shell_timeout_is_900_seconds_or_less
linux_secured::validators::default_user_umask_is_027_or_more_restrictive
linux_secured::validators::dhcp_server_is_not_installed
linux_secured::validators::disable_automounting
linux_secured::validators::disable_usb_storage
linux_secured::validators::discretionary_access_control_permission_modification_events_are_collected
linux_secured::validators::dns_server_is_not_installed
linux_secured::validators::events_that_modify_date_and_time_information_are_collected
linux_secured::validators::events_that_modify_the_sudo_log_file_are_collected
linux_secured::validators::events_that_modify_the_systems_mandatory_access_controls_are_collected
linux_secured::validators::events_that_modify_the_systems_network_environment_are_collected
linux_secured::validators::events_that_modify_user_group_information_are_collected
linux_secured::validators::file_deletion_events_by_users_are_collected
linux_secured::validators::filesystem_integrity_is_regularly_checked
linux_secured::validators::firewalld_default_zone_is_set
linux_secured::validators::firewalld_is_either_not_installed_or_masked_with_iptables
linux_secured::validators::firewalld_is_either_not_installed_or_masked_with_nftables
linux_secured::validators::firewalld_is_installed
linux_secured::validators::firewalld_service_enabled_and_running
linux_secured::validators::ftp_server_is_not_installed
linux_secured::validators::gdm_login_banner_is_configured
linux_secured::validators::gpgcheck_is_globally_activated
linux_secured::validators::grpquota_option_set_on_home_partition
linux_secured::validators::http_proxy_server_is_not_installed
linux_secured::validators::icmp_redirects_are_not_accepted
linux_secured::validators::imap_and_pop3_server_is_not_installed
linux_secured::validators::inactive_password_lock_is_30_days_or_less
linux_secured::validators::ip6tables_default_deny_firewall_policy
linux_secured::validators::ip6tables_firewall_rules_exist_for_all_open_ports
linux_secured::validators::ip6tables_is_enabled_and_active
linux_secured::validators::ip6tables_loopback_traffic_is_configured
linux_secured::validators::ip6tables_rules_are_saved
linux_secured::validators::ip_forwarding_is_disabled
linux_secured::validators::iptables_default_deny_firewall_policy
linux_secured::validators::iptables_is_enabled_and_active
linux_secured::validators::iptables_loopback_traffic_is_configured
linux_secured::validators::iptables_packages_are_installed
linux_secured::validators::iptables_rules_are_saved
linux_secured::validators::iptables_rules_exist_for_all_open_ports
linux_secured::validators::iptables_services_not_installed_with_firewalld
linux_secured::validators::iptables_services_not_installed_with_nftables
linux_secured::validators::ipv6_router_advertisements_are_not_accepted
linux_secured::validators::journald_is_configured_to_compress_large_log_files
linux_secured::validators::journald_is_configured_to_write_logfiles_to_persistent_disk
linux_secured::validators::journald_is_not_configured_to_receive_logs_from_a_remote_client
linux_secured::validators::journald_is_not_configured_to_recieve_logs_from_a_remote_client
linux_secured::validators::journald_service_is_enabled
linux_secured::validators::kernel_module_loading_unloading_and_modification_is_collected
linux_secured::validators::last_logged_in_user_display_is_disabled
linux_secured::validators::ldap_client_is_not_installed
linux_secured::validators::local_login_warning_banner_is_configured_properly
linux_secured::validators::lockout_for_failed_password_attempts_is_configured
linux_secured::validators::login_and_logout_events_are_collected
linux_secured::validators::mail_transfer_agent_is_configured_for_local_only_mode
linux_secured::validators::mcs_translation_service_mcstrans_is_not_installed
linux_secured::validators::message_of_the_day_is_configured_properly
linux_secured::validators::minimum_days_between_password_changes_is_7_or_more
linux_secured::validators::mounting_of_cramfs_filesystems_is_disabled
linux_secured::validators::mounting_of_squashfs_filesystems_is_disabled
linux_secured::validators::mounting_of_udf_filesystems_is_disabled
linux_secured::validators::net_snmp_is_not_installed
linux_secured::validators::nfs_utils_is_not_installed_or_the_nfs_server_service_is_masked
linux_secured::validators::nftables_base_chains_exist
linux_secured::validators::nftables_default_deny_firewall_policy
linux_secured::validators::nftables_either_not_installed_or_masked_with_firewalld
linux_secured::validators::nftables_is_installed
linux_secured::validators::nftables_is_not_installed_with_iptables
linux_secured::validators::nftables_loopback_traffic_is_configured
linux_secured::validators::nftables_rules_are_permanent
linux_secured::validators::nftables_service_is_enabled
linux_secured::validators::nis_client_is_not_installed
linux_secured::validators::nis_server_is_not_installed
linux_secured::validators::no_duplicate_gids_exist
linux_secured::validators::no_duplicate_group_names_exist
linux_secured::validators::no_duplicate_uids_exist
linux_secured::validators::no_duplicate_user_names_exist
linux_secured::validators::no_unconfined_services_exist
linux_secured::validators::no_ungrouped_files_or_directories_exist
linux_secured::validators::no_unowned_files_or_directories_exist
linux_secured::validators::no_users_have_forward_files
linux_secured::validators::no_users_have_netrc_files
linux_secured::validators::no_users_have_rhosts_files
linux_secured::validators::no_world_writable_files_exist
linux_secured::validators::nodev_option_set_on_dev_shm_partition
linux_secured::validators::nodev_option_set_on_home_partition
linux_secured::validators::nodev_option_set_on_tmp_partition
linux_secured::validators::nodev_option_set_on_var_log_audit_partition
linux_secured::validators::nodev_option_set_on_var_log_partition
linux_secured::validators::nodev_option_set_on_var_partition
linux_secured::validators::nodev_option_set_on_var_tmp_partition
linux_secured::validators::noexec_option_set_on_dev_shm_partition
linux_secured::validators::noexec_option_set_on_tmp_partition
linux_secured::validators::noexec_option_set_on_var_log_audit_partition
linux_secured::validators::noexec_option_set_on_var_log_partition
linux_secured::validators::noexec_option_set_on_var_partition
linux_secured::validators::noexec_option_set_on_var_tmp_partition
linux_secured::validators::nosuid_option_set_on_dev_shm_partition
linux_secured::validators::nosuid_option_set_on_home_partition
linux_secured::validators::nosuid_option_set_on_tmp_partition
linux_secured::validators::nosuid_option_set_on_var_log_audit_partition
linux_secured::validators::nosuid_option_set_on_var_log_partition
linux_secured::validators::nosuid_option_set_on_var_partition
linux_secured::validators::nosuid_option_set_on_var_tmp_partition
linux_secured::validators::packet_redirect_sending_is_disabled
linux_secured::validators::password_creation_requirements_are_configured
linux_secured::validators::password_expiration_is_365_days_or_less
linux_secured::validators::password_expiration_warning_days_is_7_or_more
linux_secured::validators::password_fields_are_not_empty
linux_secured::validators::password_hashing_algorithm_is_sha_512
linux_secured::validators::password_reuse_is_limited
linux_secured::validators::permissions_on_all_logfiles_are_configured
linux_secured::validators::permissions_on_bootloader_config_are_configured
linux_secured::validators::permissions_on_etc_cron_d_are_configured
linux_secured::validators::permissions_on_etc_cron_daily_are_configured
linux_secured::validators::permissions_on_etc_cron_hourly_are_configured
linux_secured::validators::permissions_on_etc_cron_monthly_are_configured
linux_secured::validators::permissions_on_etc_cron_weekly_are_configured
linux_secured::validators::permissions_on_etc_crontab_are_configured
linux_secured::validators::permissions_on_etc_group_are_configured
linux_secured::validators::permissions_on_etc_group_minus_are_configured
linux_secured::validators::permissions_on_etc_gshadow_are_configured
linux_secured::validators::permissions_on_etc_gshadow_minus_are_configured
linux_secured::validators::permissions_on_etc_issue_are_configured
linux_secured::validators::permissions_on_etc_issue_net_are_configured
linux_secured::validators::permissions_on_etc_motd_are_configured
linux_secured::validators::permissions_on_etc_passwd_are_configured
linux_secured::validators::permissions_on_etc_passwd_minus_are_configured
linux_secured::validators::permissions_on_etc_shadow_are_configured
linux_secured::validators::permissions_on_etc_shadow_minus_are_configured
linux_secured::validators::permissions_on_etc_ssh_sshd_config_are_configured
linux_secured::validators::permissions_on_ssh_private_host_key_files_are_configured
linux_secured::validators::permissions_on_ssh_public_host_key_files_are_configured
linux_secured::validators::re_authentication_for_privilege_escalation_is_not_disabled_globally
linux_secured::validators::remote_login_warning_banner_is_configured_properly
linux_secured::validators::reverse_path_filtering_is_enabled
linux_secured::validators::root_is_the_only_uid_0_account
linux_secured::validators::root_path_integrity
linux_secured::validators::rpcbind_is_not_installed_or_the_rpcbind_services_are_masked
linux_secured::validators::rsh_client_is_not_installed
linux_secured::validators::rsync_is_not_installed_or_the_rsyncd_service_is_masked
linux_secured::validators::rsyslog_default_file_permissions_are_configured
linux_secured::validators::rsyslog_is_installed
linux_secured::validators::rsyslog_is_not_configured_to_receive_logs_from_a_remote_client
linux_secured::validators::rsyslog_is_not_configured_to_recieve_logs_from_a_remote_client
linux_secured::validators::rsyslog_service_is_enabled
linux_secured::validators::samba_is_not_installed
linux_secured::validators::sctp_is_disabled
linux_secured::validators::secure_icmp_redirects_are_not_accepted
linux_secured::validators::selinux_is_installed
linux_secured::validators::selinux_is_not_disabled_in_bootloader_configuration
linux_secured::validators::selinux_mode_is_enforcing
linux_secured::validators::selinux_mode_is_not_disabled
linux_secured::validators::selinux_policy_is_configured
linux_secured::validators::separate_partition_exists_for_home
linux_secured::validators::separate_partition_exists_for_var
linux_secured::validators::separate_partition_exists_for_var_log
linux_secured::validators::separate_partition_exists_for_var_log_audit
linux_secured::validators::separate_partition_exists_for_var_tmp
linux_secured::validators::session_initiation_information_is_collected
linux_secured::validators::setroubleshoot_is_not_installed
linux_secured::validators::source_routed_packets_are_not_accepted
linux_secured::validators::ssh_access_is_limited
linux_secured::validators::ssh_allowtcpforwarding_is_disabled
linux_secured::validators::ssh_hostbasedauthentication_is_disabled
linux_secured::validators::ssh_idle_timeout_interval_is_configured
linux_secured::validators::ssh_ignorerhosts_is_enabled
linux_secured::validators::ssh_logingracetime_is_set_to_one_minute_or_less
linux_secured::validators::ssh_loglevel_is_appropriate
linux_secured::validators::ssh_maxauthtries_is_set_to_4_or_less
linux_secured::validators::ssh_maxsessions_is_set_to_10_or_less
linux_secured::validators::ssh_maxstartups_is_configured
linux_secured::validators::ssh_pam_is_enabled
linux_secured::validators::ssh_permitemptypasswords_is_disabled
linux_secured::validators::ssh_permituserenvironment_is_disabled
linux_secured::validators::ssh_root_login_is_disabled
linux_secured::validators::ssh_warning_banner_is_configured
linux_secured::validators::ssh_x11_forwarding_is_disabled
linux_secured::validators::sticky_bit_is_set_on_all_world_writable_directories
linux_secured::validators::successful_and_unsuccessful_attempts_to_use_the_chacl_command_are_recorded
linux_secured::validators::successful_and_unsuccessful_attempts_to_use_the_chcon_command_are_recorded
linux_secured::validators::successful_and_unsuccessful_attempts_to_use_the_setfacl_command_are_recorded
linux_secured::validators::successful_and_unsuccessful_attempts_to_use_the_usermod_command_are_recorded
linux_secured::validators::successful_file_system_mounts_are_collected
linux_secured::validators::sudo_authentication_timeout_is_configured_correctly
linux_secured::validators::sudo_commands_use_pty
linux_secured::validators::sudo_is_installed
linux_secured::validators::sudo_log_file_exists
linux_secured::validators::suspicious_packets_are_logged
linux_secured::validators::system_accounts_are_secured
linux_secured::validators::system_is_disabled_when_audit_logs_are_full
linux_secured::validators::system_wide_crypto_policy_is_not_legacy
linux_secured::validators::system_wide_crypto_policy_is_not_over_ridden
linux_secured::validators::systemd_journal_remote_is_installed
linux_secured::validators::talk_client_is_not_installed
linux_secured::validators::tcp_syn_cookies_is_enabled
linux_secured::validators::telnet_client_is_not_installed
linux_secured::validators::telnet_server_is_not_installed
linux_secured::validators::tftp_client_is_not_installed
linux_secured::validators::tftp_server_is_not_installed
linux_secured::validators::time_synchronization_is_in_use
linux_secured::validators::tmp_is_a_separate_partition
linux_secured::validators::unsuccessful_file_access_attempts_are_collected
linux_secured::validators::use_of_privileged_commands_are_collected
linux_secured::validators::users_dot_files_are_not_group_or_world_writable
linux_secured::validators::users_home_directories_permissions_are_750_or_more_restrictive
linux_secured::validators::users_must_provide_password_for_escalation
linux_secured::validators::users_netrc_files_are_not_group_or_world_accessible
linux_secured::validators::users_own_their_home_directories
linux_secured::validators::usrquota_option_set_on_home_partition
linux_secured::validators::vsftp_server_is_not_installed
linux_secured::validators::wireless_interfaces_are_disabled
linux_secured::validators::xdmcp_is_not_enabled
linux_secured::validators::xinetd_is_not_installed
linux_secured::validators::xorg_x11_server_common_is_not_installed
Resource Type Listing A-Z
L
linux_secured_setup
Puppet Provider Listing A-Z
S
simple
(Resource type: linux_secured_setup)
Puppet Function Listing A-Z
L
linux_secured::default_doc_version
(Ruby 4.x API)
linux_secured::default_product_version
(Ruby 4.x API)
linux_secured::delegate_to_validator
(Ruby 4.x API)
linux_secured::filter_controls
(Ruby 4.x API)
linux_secured::lookup_setting
(Ruby 4.x API)
linux_secured::sysctl_value
(Ruby 4.x API)
linux_secured::validate_cis_versions
(Ruby 4.x API)
linux_secured::validate_stig_versions
(Ruby 4.x API)
File Listing
README