summaryrefslogtreecommitdiff
path: root/cfengine
diff options
context:
space:
mode:
Diffstat (limited to 'cfengine')
-rw-r--r--cfengine/cf.services.harden12
1 files changed, 8 insertions, 4 deletions
diff --git a/cfengine/cf.services.harden b/cfengine/cf.services.harden
index 68f9fea..f2b96c6 100644
--- a/cfengine/cf.services.harden
+++ b/cfengine/cf.services.harden
@@ -11,6 +11,9 @@ control:
groups:
install_logcheck = ( '/usr/bin/test ! -e /usr/sbin/logcheck' )
+ #Define classes according to the installed MTA
+ runs_postfix = ( '/usr/bin/test -e /usr/sbin/postfix' )
+
editfiles:
# AIDE section
{ /etc/aide/aide.conf
@@ -102,7 +105,7 @@ editfiles:
}
copy:
- #The linktype is necesarry for links to be replaced with files.
+ #The linktype is necessary for links to be replaced with files.
NameServer::
$(LocalCommon)/logcheck/ignore.d.$(type)/bind dest=$(logcheck)/ignore.d/local-bind linktype=copy
$(LocalCommon)/logcheck/violations.ignore.d/bind dest=$(logcheck)/violations.ignore.d/local-bind linktype=copy
@@ -128,12 +131,13 @@ copy:
SpamAssServer::
$(LocalCommon)/logcheck/ignore.d.$(type)/spamassassin dest=$(logcheck)/ignore.d/local-spamassassin linktype=copy
- any::
- $(LocalCommon)/logcheck/ignore.d.$(type)/ssh dest=$(logcheck)/ignore.d/local-ssh linktype=copy
+ runs_postfix::
$(LocalCommon)/logcheck/ignore.d.$(type)/postfix dest=$(logcheck)/ignore.d/local-postfix linktype=copy
+ $(LocalCommon)/logcheck/violations.ignore.d/postfix dest=$(logcheck)/violations.ignore.d/local-postfix linktype=copy
+ any::
+ $(LocalCommon)/logcheck/ignore.d.$(type)/ssh dest=$(logcheck)/ignore.d/local-ssh linktype=copy
$(LocalCommon)/logcheck/violations.ignore.d/ssh dest=$(logcheck)/violations.ignore.d/local-ssh linktype=copy
- $(LocalCommon)/logcheck/violations.ignore.d/postfix dest=$(logcheck)/violations.ignore.d/local-postfix linktype=copy
links:
any::