openstack
/
charm-ceph-osd
Code Issues Proposed changes
charm-ceph-osd/hooks/charmhelpers/contrib/hardening
History
Billy Olsen d4f3dd2ee6 Updates for jammy quincy and finalise charmcraft builds 
- Update charmcraft.yaml for arch builds
- Remove impish-xena tests
- Update osci.yaml to include py3.10 default job
- Resync charmhelpers and charms.ceph

Change-Id: I41abace773d8926eaa00076dd83f52849c96150d
 		2022-04-07 16:47:55 +02:00
..
apache Updates for jammy quincy and finalise charmcraft builds 2022-04-07 16:47:55 +02:00
audits Updates for jammy quincy and finalise charmcraft builds 2022-04-07 16:47:55 +02:00
defaults Upgrade OSDs one at a time when changing ownership 2017-03-28 12:45:42 -07:00
host Updates for jammy quincy and finalise charmcraft builds 2022-04-07 16:47:55 +02:00
mysql Updates for jammy quincy and finalise charmcraft builds 2022-04-07 16:47:55 +02:00
ssh Upgrade OSDs one at a time when changing ownership 2017-03-28 12:45:42 -07:00
README.hardening.md Add hardening support 2016-03-24 11:14:47 +00:00
__init__.py Resync charmhelpers for licensing change 2016-07-06 16:29:43 +01:00
harden.py Updates for jammy quincy and finalise charmcraft builds 2022-04-07 16:47:55 +02:00
templating.py Updates for jammy quincy and finalise charmcraft builds 2022-04-07 16:47:55 +02:00
utils.py Updates for jammy quincy and finalise charmcraft builds 2022-04-07 16:47:55 +02:00

README.hardening.md

Juju charm-helpers hardening library

Description

This library provides multiple implementations of system and application hardening that conform to the standards of http://hardening.io/.

Current implementations include:

  • OS
  • SSH
  • MySQL
  • Apache

Requirements

  • Juju Charms

Usage

  1. Synchronise this library into your charm and add the harden() decorator (from contrib.hardening.harden) to any functions or methods you want to use to trigger hardening of your application/system.

  2. Add a config option called 'harden' to your charm config.yaml and set it to a space-delimited list of hardening modules you want to run e.g. "os ssh"

  3. Override any config defaults (contrib.hardening.defaults) by adding a file called hardening.yaml to your charm root containing the name(s) of the modules whose settings you want override at root level and then any settings with overrides e.g.

    os: general: desktop_enable: True

  4. Now just run your charm as usual and hardening will be applied each time the hook runs.