openstack
/
charm-swift-storage
Code Issues Proposed changes
charm-swift-storage/charmhelpers/contrib/hardening
History
Chris MacNaughton e62a646a4f Sync charm-helpers 
Change-Id: I2bc8e741519b9ebbeacc790d19db8f8eea903781
 		2019-07-16 07:06:03 +00:00
..
apache Sync charm-helpers 2019-07-16 07:06:03 +00:00
audits Sync charm-helpers 2018-11-07 15:36:11 -06:00
defaults Sync charm-helpers 2019-07-16 07:06:03 +00:00
host Sync charm-helpers 2019-07-16 07:06:03 +00:00
mysql Sync charm-helpers 2019-07-16 07:06:03 +00:00
ssh Sync charm-helpers 2019-07-16 07:06:03 +00:00
README.hardening.md Add hardening support 2016-03-24 11:11:58 +00:00
__init__.py Resync charmhelpers for licensing change 2016-07-06 16:44:39 +01:00
harden.py Sync charm-helpers 2018-11-07 15:36:11 -06:00
templating.py Sync charm-helpers to enable swift 2.13.0 2017-02-16 15:05:53 +00:00
utils.py Resync charmhelpers for licensing change 2016-07-06 16:44:39 +01:00

README.hardening.md

Juju charm-helpers hardening library

Description

This library provides multiple implementations of system and application hardening that conform to the standards of http://hardening.io/.

Current implementations include:

  • OS
  • SSH
  • MySQL
  • Apache

Requirements

  • Juju Charms

Usage

  1. Synchronise this library into your charm and add the harden() decorator (from contrib.hardening.harden) to any functions or methods you want to use to trigger hardening of your application/system.

  2. Add a config option called 'harden' to your charm config.yaml and set it to a space-delimited list of hardening modules you want to run e.g. "os ssh"

  3. Override any config defaults (contrib.hardening.defaults) by adding a file called hardening.yaml to your charm root containing the name(s) of the modules whose settings you want override at root level and then any settings with overrides e.g.

    os: general: desktop_enable: True

  4. Now just run your charm as usual and hardening will be applied each time the hook runs.