Puppet Class: toughen::updates

Defined in:
manifests/updates.pp

Overview

Class: toughen::updates

This class configures software updates and signing

Parameters

  • ‘use_gpg`

Whether to enable GPG signing for packages, defaults to true

Parameters:

  • use_gpg (Any) (defaults to: true) 


11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
 
# File 'manifests/updates.pp', line 11

class toughen::updates (
  $use_gpg = true
){
  validate_bool($use_gpg)

  case $::osfamily {
    'redhat': {
      if $use_gpg {
        augeas { 'enable yum gpgcheck':
          context => '/files/etc/yum.conf',
          changes => [
            'set gpgcheck 1',
          ],
        }
      }

      # TODO
      # section 1.2.1 - connection to RHN repos
      # section 1.2.4 - disable RHNSD
      # section 1.2.5 - use yum for updates

      # Skip as gives false positives due to other controls
      # section 1.2.6 - verify package integrity
    }
    default: {
      fail("OS family ${::osfamily} not supported.")
    }
  }
}