Skip to content
This repository has been archived by the owner on Jun 30, 2021. It is now read-only.

Add rule_group defined type #59

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

alexjfisher
Copy link

As an alternative to, (but can be used alongside), auditd::rule.
Used to create a group of related rules with a comment header.

Copy link

@igalic igalic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👀

files => Array[Stdlib::Unixpath,1],
Optional[permissions] => Array[Enum['r','w','x','a'],1],
Optional[keys] => Array[String[1]],
}]
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is just wild!

Array[String] $default_keys,
| -%>
<% $rule['files'].each |$file| {-%>
-w <%= $file %> <% if 'permissions' in $rule {-%> -p <%= $rule['permissions'].join('') %><% } -%><%= (pick($rule['keys'], []) + $default_keys).map |$key| {" -k ${key}"}.join('') %>
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

given the -%>, you can put <%= (pick… into the next line, for readability…

:osfamily => 'RedHat',
:operatingsystem => 'RedHat',
:operatingsystemrelease => '7',
:concat_basedir => '/var/lib/puppet/concat',
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

concat_basedir is dead. IIRC since concat 2.0.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants