8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
# File 'manifests/trusty64/filesystems.pp', line 8
class cis_benchmark::trusty64::filesystems {
## local variables: stig items
$cis_1_1_1_1 = $::cis_benchmark::cis_1_1_1_1
$cis_1_1_1_2 = $::cis_benchmark::cis_1_1_1_2
$cis_1_1_1_3 = $::cis_benchmark::cis_1_1_1_3
$cis_1_1_1_4 = $::cis_benchmark::cis_1_1_1_4
$cis_1_1_1_5 = $::cis_benchmark::cis_1_1_1_5
$cis_1_1_1_6 = $::cis_benchmark::cis_1_1_1_6
$cis_1_1_1_7 = $::cis_benchmark::cis_1_1_1_7
$cis_1_1_1_8 = $::cis_benchmark::cis_1_1_1_8
##
## 1.1.1.1 Ensure mounting of cramfs filesystems is disabled (Scored)
## 1.1.1.2 Ensure mounting of freevxfs filesystems is disabled (Scored)
## 1.1.1.3 Ensure mounting of jffs2 filesystems is disabled (Scored)
## 1.1.1.4 Ensure mounting of hfs filesystems is disabled (Scored)
## 1.1.1.5 Ensure mounting of hfsplus filesystems is disabled (Scored)
## 1.1.1.6 Ensure mounting of squashfs filesystems is disabled (Scored)
## 1.1.1.7 Ensure mounting of udf filesystems is disabled (Scored)
## 1.1.1.8 Ensure mounting of FAT filesystems is disabled (Scored)
##
if (
$cis_1_1_1_1 or
$cis_1_1_1_2 or
$cis_1_1_1_3 or
$cis_1_1_1_4 or
$cis_1_1_1_5 or
$cis_1_1_1_6 or
$cis_1_1_1_7 or
$cis_1_1_1_8
) {
file { 'file-cis-1-1-1':
content => dos2unix(template('cis_benchmark/trusty64/CIS.conf.erb')),
path => '/etc/modprobe.d/CIS.conf',
mode => '0644',
owner => root,
group => root,
}
}
}
|