|
31 | 31 | "conditional-installer": {
|
32 | 32 | "description": "Allows you to specify packages you want installed and conditions for where you want them installed, as well as a list of packages you generally want uninstalled.",
|
33 | 33 | "subdirectory": "security/conditional-installer",
|
| 34 | + "steps": [ |
| 35 | + "copy main.cf services/cfbs/modules/conditional-installer/main.cf", |
| 36 | + "input ./input.json def.json", |
| 37 | + "bundles conditional_installer:main", |
| 38 | + "policy_files services/cfbs/modules/conditional-installer/main.cf" |
| 39 | + ], |
34 | 40 | "input": [
|
35 | 41 | {
|
36 | 42 | "type": "string",
|
|
69 | 75 | ],
|
70 | 76 | "while": "Do you want to specify more packages to be installed?"
|
71 | 77 | }
|
72 |
| - ], |
| 78 | + ] |
| 79 | + }, |
| 80 | + "delete-home-dotrhosts": { |
| 81 | + "description": "Ensure that ~/.rhosts files are not present, as they present a security risk.", |
| 82 | + "subdirectory": "security/delete-home-dotrhosts", |
73 | 83 | "steps": [
|
74 |
| - "copy main.cf services/cfbs/modules/conditional-installer/main.cf", |
75 |
| - "input ./input.json def.json", |
76 |
| - "bundles conditional_installer:main", |
77 |
| - "policy_files services/cfbs/modules/conditional-installer/main.cf" |
| 84 | + "copy policy/main.cf services/cfbs/delete-home-dotrhosts/", |
| 85 | + "policy_files services/cfbs/delete-home-dotrhosts/", |
| 86 | + "bundles delete_home_dotrhosts:main" |
| 87 | + ] |
| 88 | + }, |
| 89 | + "delete-home-dotshosts": { |
| 90 | + "description": "Ensure that ~/.shosts files are not present, as they present a security risk.", |
| 91 | + "subdirectory": "security/delete-home-dotshots", |
| 92 | + "steps": [ |
| 93 | + "copy policy/main.cf services/cfbs/delete-home-dotshots/", |
| 94 | + "policy_files services/cfbs/delete-home-dotshots/", |
| 95 | + "bundles delete_home_dotshosts:main" |
78 | 96 | ]
|
79 | 97 | },
|
80 | 98 | "demo": {
|
|
97 | 115 | "subdirectory": "management/every-minute",
|
98 | 116 | "steps": ["json def.json def.json"]
|
99 | 117 | },
|
| 118 | + "inventory-unshadowed-users": { |
| 119 | + "description": "Adds reporting data (inventory) on local users in /etc/passwd not using /etc/shadow for their password.", |
| 120 | + "subdirectory": "security/inventory-unshadowed-users", |
| 121 | + "dependencies": ["library-parsed-local-users"], |
| 122 | + "steps": [ |
| 123 | + "copy policy/main.cf services/cfbs/inventory-unshadowed-users/", |
| 124 | + "policy_files services/cfbs/inventory-unshadowed-users/", |
| 125 | + "bundles inventory_unshadowed_users:main" |
| 126 | + ] |
| 127 | + }, |
100 | 128 | "library-for-promise-types-in-bash": {
|
101 | 129 | "description": "Library enabling promise types implemented in bash.",
|
102 | 130 | "subdirectory": "libraries/bash",
|
|
118 | 146 | },
|
119 | 147 | "promise-type-ansible": {
|
120 | 148 | "description": "Promise type to manage systemd services.",
|
121 |
| - "dependencies": ["library-for-promise-types-in-python"], |
122 | 149 | "subdirectory": "promise-types/ansible",
|
| 150 | + "dependencies": ["library-for-promise-types-in-python"], |
123 | 151 | "steps": [
|
124 | 152 | "copy ansible_promise.py modules/promises/",
|
125 | 153 | "append enable.cf services/init.cf"
|
126 | 154 | ]
|
127 | 155 | },
|
128 | 156 | "promise-type-git": {
|
129 | 157 | "description": "Promise type to manage git repos.",
|
130 |
| - "dependencies": ["library-for-promise-types-in-python"], |
131 | 158 | "subdirectory": "promise-types/git",
|
| 159 | + "dependencies": ["library-for-promise-types-in-python"], |
132 | 160 | "steps": [
|
133 | 161 | "copy git.py modules/promises/",
|
134 | 162 | "append enable.cf services/init.cf"
|
135 | 163 | ]
|
136 | 164 | },
|
137 | 165 | "promise-type-groups": {
|
138 | 166 | "description": "Experimental promise type to manage local user groups.",
|
139 |
| - "dependencies": ["library-for-promise-types-in-python"], |
140 | 167 | "subdirectory": "promise-types/groups",
|
| 168 | + "dependencies": ["library-for-promise-types-in-python"], |
141 | 169 | "steps": [
|
142 | 170 | "copy groups.py modules/promises/",
|
143 | 171 | "append enable.cf services/init.cf"
|
144 | 172 | ]
|
145 | 173 | },
|
146 | 174 | "promise-type-systemd": {
|
147 | 175 | "description": "Promise type to manage systemd services.",
|
148 |
| - "dependencies": ["library-for-promise-types-in-python"], |
149 | 176 | "subdirectory": "promise-types/systemd",
|
| 177 | + "dependencies": ["library-for-promise-types-in-python"], |
150 | 178 | "steps": [
|
151 | 179 | "copy systemd.py modules/promises/",
|
152 | 180 | "append enable.cf services/init.cf"
|
|
155 | 183 | "uninstall-packages": {
|
156 | 184 | "description": "Allows you to specify a list of packages you want uninstalled on your hosts.",
|
157 | 185 | "subdirectory": "security/uninstall-packages",
|
| 186 | + "steps": [ |
| 187 | + "copy uninstall-packages.cf services/cfbs/modules/uninstall-packages/uninstall-packages.cf", |
| 188 | + "input uninstall-packages/input.json def.json", |
| 189 | + "bundles uninstall_packages:uninstall_packages", |
| 190 | + "policy_files services/cfbs/modules/uninstall-packages/uninstall-packages.cf" |
| 191 | + ], |
158 | 192 | "input": [
|
159 | 193 | {
|
160 | 194 | "type": "list",
|
|
179 | 213 | ],
|
180 | 214 | "while": "Do you want to specify more packages to be uninstalled?"
|
181 | 215 | }
|
182 |
| - ], |
183 |
| - "steps": [ |
184 |
| - "copy uninstall-packages.cf services/cfbs/modules/uninstall-packages/uninstall-packages.cf", |
185 |
| - "input uninstall-packages/input.json def.json", |
186 |
| - "bundles uninstall_packages:uninstall_packages", |
187 |
| - "policy_files services/cfbs/modules/uninstall-packages/uninstall-packages.cf" |
188 | 216 | ]
|
189 | 217 | },
|
190 | 218 | "uninstall-rsh-server": {
|
|
195 | 223 | "bundles uninstall_rsh_server",
|
196 | 224 | "policy_files services/cfbs/modules/uninstall-rsh-server/uninstall-rsh-server.cf"
|
197 | 225 | ]
|
198 |
| - }, |
199 |
| - "inventory-unshadowed-users": { |
200 |
| - "description": "Adds reporting data (inventory) on local users in /etc/passwd not using /etc/shadow for their password.", |
201 |
| - "dependencies": ["library-parsed-local-users"], |
202 |
| - "subdirectory": "security/inventory-unshadowed-users", |
203 |
| - "steps": [ |
204 |
| - "copy policy/main.cf services/cfbs/inventory-unshadowed-users/", |
205 |
| - "policy_files services/cfbs/inventory-unshadowed-users/", |
206 |
| - "bundles inventory_unshadowed_users:main" |
207 |
| - ] |
208 |
| - }, |
209 |
| - "delete-home-dotrhosts": { |
210 |
| - "description": "Ensure that ~/.rhosts files are not present, as they present a security risk.", |
211 |
| - "subdirectory": "security/delete-home-dotrhosts", |
212 |
| - "steps": [ |
213 |
| - "copy policy/main.cf services/cfbs/delete-home-dotrhosts/", |
214 |
| - "policy_files services/cfbs/delete-home-dotrhosts/", |
215 |
| - "bundles delete_home_dotrhosts:main" |
216 |
| - ] |
217 |
| - }, |
218 |
| - "delete-home-dotshosts": { |
219 |
| - "description": "Ensure that ~/.shosts files are not present, as they present a security risk.", |
220 |
| - "subdirectory": "security/delete-home-dotshots", |
221 |
| - "steps": [ |
222 |
| - "copy policy/main.cf services/cfbs/delete-home-dotshots/", |
223 |
| - "policy_files services/cfbs/delete-home-dotshots/", |
224 |
| - "bundles delete_home_dotshosts:main" |
225 |
| - ] |
226 | 226 | }
|
227 | 227 | }
|
228 | 228 | }
|
0 commit comments