openstack
/
charm-openstack-dashboard
Code Issues Proposed changes
charm-openstack-dashboard/charmhelpers/contrib/hardening
History
Alex Kavanagh eca37a1dad Update charm to PY3 only code 
This change upgrades the charm to PY3 only mode.
Note the changes to charm-helpers has also been made to support
Apache auditing code in PY3.

Change-Id: Idd347de5818ec57cb05f38170fe0d6536157a0da
 		2018-10-02 12:11:08 +01:00
..
apache Update charm to PY3 only code 2018-10-02 12:11:08 +01:00
audits Update charm to PY3 only code 2018-10-02 12:11:08 +01:00
defaults Update charm to PY3 only code 2018-10-02 12:11:08 +01:00
host Update charm to PY3 only code 2018-10-02 12:11:08 +01:00
mysql Update charm to PY3 only code 2018-10-02 12:11:08 +01:00
ssh Update charm to PY3 only code 2018-10-02 12:11:08 +01:00
README.hardening.md Update charm to PY3 only code 2018-10-02 12:11:08 +01:00
__init__.py Update charm to PY3 only code 2018-10-02 12:11:08 +01:00
harden.py Update charm to PY3 only code 2018-10-02 12:11:08 +01:00
templating.py Update charm to PY3 only code 2018-10-02 12:11:08 +01:00
utils.py Update charm to PY3 only code 2018-10-02 12:11:08 +01:00

README.hardening.md

Juju charm-helpers hardening library

Description

This library provides multiple implementations of system and application hardening that conform to the standards of http://hardening.io/.

Current implementations include:

  • OS
  • SSH
  • MySQL
  • Apache

Requirements

  • Juju Charms

Usage

  1. Synchronise this library into your charm and add the harden() decorator (from contrib.hardening.harden) to any functions or methods you want to use to trigger hardening of your application/system.

  2. Add a config option called 'harden' to your charm config.yaml and set it to a space-delimited list of hardening modules you want to run e.g. "os ssh"

  3. Override any config defaults (contrib.hardening.defaults) by adding a file called hardening.yaml to your charm root containing the name(s) of the modules whose settings you want override at root level and then any settings with overrides e.g.

    os: general: desktop_enable: True

  4. Now just run your charm as usual and hardening will be applied each time the hook runs.