Puppet Class: psick::hardening::securetty

Defined in:
manifests/hardening/securetty.pp

Overview

Class: os_hardening::securetty

Configures securetty.

Parameters:

  • root_ttys (Array) (defaults to: ['console','tty1','tty2','tty3','tty4','tty5','tty6']) —

    An array of ttys from which is allowed root access

  • securetty_template (String) (defaults to: 'psick/hardening/securetty/securetty.erb') —

    The erb template path, as used in template(), to use to manage the content of /etc/securetty



9
10
11
12
13
14
15
16
17
18
19
20
21
 
# File 'manifests/hardening/securetty.pp', line 9

class psick::hardening::securetty (
  Array $root_ttys           = ['console','tty1','tty2','tty3','tty4','tty5','tty6'],
  String $securetty_template = 'psick/hardening/securetty/securetty.erb',
){
  $ttys = join( $root_ttys, "\n")
  file { '/etc/securetty':
    ensure  => file,
    content => template( $securetty_template ),
    owner   => root,
    group   => root,
    mode    => '0400',
  }
}