openstack/charm-nova-compute-proxy
Code Issues Proposed changes
charm-nova-compute-proxy/hooks/charmhelpers/contrib/hardening/README.hardening.md
Ryan Beisner 3f7a8fad0c Add initial tests and repo review configs 
- Initialize repo for gerrit review.
- Resync charm-helpers.
- Add missing install.real hook.
- Add missing status update hook.
- Add very basic unit tests and amulet tests.
- Set cpu mode default value.

Closes-Bug: #1639020
Closes-Bug: #1638930
Partial-Bug: #1638773
Partial-Bug: #1639943

Change-Id: Ifbf627329ddb25a29d6c0af4b9a34a488bc55629
2016-11-07 20:50:16 +00:00

1.1 KiB
Raw Blame History

Juju charm-helpers hardening library

Description

This library provides multiple implementations of system and application hardening that conform to the standards of http://hardening.io/.

Current implementations include:

  • OS
  • SSH
  • MySQL
  • Apache

Requirements

  • Juju Charms

Usage

  1. Synchronise this library into your charm and add the harden() decorator (from contrib.hardening.harden) to any functions or methods you want to use to trigger hardening of your application/system.

  2. Add a config option called 'harden' to your charm config.yaml and set it to a space-delimited list of hardening modules you want to run e.g. "os ssh"

  3. Override any config defaults (contrib.hardening.defaults) by adding a file called hardening.yaml to your charm root containing the name(s) of the modules whose settings you want override at root level and then any settings with overrides e.g.

    os: general: desktop_enable: True

  4. Now just run your charm as usual and hardening will be applied each time the hook runs.