summaryrefslogtreecommitdiff
path: root/profiles/wheezy/classes/Admin/harden
diff options
context:
space:
mode:
Diffstat (limited to 'profiles/wheezy/classes/Admin/harden')
-rw-r--r--profiles/wheezy/classes/Admin/harden/account/index.yml12
-rw-r--r--profiles/wheezy/classes/Admin/harden/account/strong.yml9
-rw-r--r--profiles/wheezy/classes/Admin/harden/index.yml23
-rw-r--r--profiles/wheezy/classes/Admin/harden/trustweb.yml9
4 files changed, 53 insertions, 0 deletions
diff --git a/profiles/wheezy/classes/Admin/harden/account/index.yml b/profiles/wheezy/classes/Admin/harden/account/index.yml
new file mode 100644
index 0000000..ac726d5
--- /dev/null
+++ b/profiles/wheezy/classes/Admin/harden/account/index.yml
@@ -0,0 +1,12 @@
+classes:
+ - Admin.harden
+parameters:
+ doc:
+ admin:
+ pkg:
+ - include passive account hardening PAM plugin cracklib
+ pkg:
+ - libpam-cracklib
+ - miscfiles
+ pkg-auto:
+ - miscfiles
diff --git a/profiles/wheezy/classes/Admin/harden/account/strong.yml b/profiles/wheezy/classes/Admin/harden/account/strong.yml
new file mode 100644
index 0000000..ba2a9df
--- /dev/null
+++ b/profiles/wheezy/classes/Admin/harden/account/strong.yml
@@ -0,0 +1,9 @@
+classes:
+ - Admin.harden.account
+parameters:
+ doc:
+ admin:
+ pkg:
+ - include proactive account hardening tool John the Ripper
+ pkg:
+ - john
diff --git a/profiles/wheezy/classes/Admin/harden/index.yml b/profiles/wheezy/classes/Admin/harden/index.yml
new file mode 100644
index 0000000..9abe2f4
--- /dev/null
+++ b/profiles/wheezy/classes/Admin/harden/index.yml
@@ -0,0 +1,23 @@
+classes:
+ - Admin.etc.track
+parameters:
+ doc:
+ admin:
+ pkg:
+ - include hardening tools
+ pkg:
+ - e2fsck-static
+ - changetrack
+ - fail2ban
+ - harden
+ - monkeysphere
+ - rkhunter
+ - samhain
+ - sash
+ - sudo
+ - systraq
+ - unhide.rb
+ pkg-auto:
+ - samhain
+ - sash
+ - unhide.rb
diff --git a/profiles/wheezy/classes/Admin/harden/trustweb.yml b/profiles/wheezy/classes/Admin/harden/trustweb.yml
new file mode 100644
index 0000000..fb852c1
--- /dev/null
+++ b/profiles/wheezy/classes/Admin/harden/trustweb.yml
@@ -0,0 +1,9 @@
+classes:
+ - Admin
+parameters:
+ doc:
+ admin:
+ pkg:
+ - include web-of-trust hardening tool Monkeysphere
+ pkg:
+ - monkeysphere