sce_windows

Deletes c:\windows	emp\SecurityPolicy.inf If this file becomes corrupted and/or is in a security state that prevents the Puppet agent from writing to it this can cause various DSC_* errors and can pervent the Puppet making changes to the effected system.

sce_delete_securitypolicy_inf

sce_linux

sce_linux::linux_users_and_groups

sce_linux::run_audit

Report only approved services are listening on a network interface

audit_approved_services_listening

Audit authselect profile for RHEL8 and CentOS8

audit_authselect

Audit if the system is configured to boot to the command line or to the graphical user interface.

audit_boot

audit_check_ipv6

Audit DNS servers configured in /etc/resolv.conf

audit_client_dns

Finds and returns duplicate GIDs in /etc/group

audit_duplicate_gid

Finds and returns duplicate group names in /etc/group.

audit_duplicate_group_names

Finds duplicate UIDs in /etc/passwd and returns the UID and all users that use it

audit_duplicate_uid

Finds and returns duplicate user names in /etc/passwd.

audit_duplicate_user_names

Verify if /etc/shadow have empty password fields

audit_etc_shadow

Finds groups that exist in /etc/passwd but do not exist in /etc/group

audit_etcpasswd_groups

Returns the results of firewall-cmd --list-all

audit_firewalld_config

Audit all accounts expiration dates for removal.

audit_for_emergency_accounts

Report journald log rotation is configured per site policy

audit_journald_log_rotation

Report journald is not configured to send logs to rsyslog

audit_journald_logs_to_rsyslog

List all the keytab files on the system at /etc

audit_kerberos_keytab_files

Audit library files permission, ownership, and group ownership

audit_library_files

audit_mcafee_endpoint_security

Audit for the no-execution bit flag on the system

audit_no_execution_bit_flag

audit_partition_crypto

This task will report on whether the screen is locked or not when using smart card.

audit_pkcs11_eventmgr

Returns the last password change date for all users

audit_pw_change_date

Returns the output of 'semanage user -l' on the target system

audit_selinux_user_roles

audit_sgid_executables

Finds and returns any users in the shadow group

audit_shadow_group

This task checks that the given SSH provate keys are passphrase protected.

audit_ssh_key_authorized_access

audit_sshd_installation

audit_sshd_status

Audit the existance of sssd certmap configuration

audit_sssd_certmap

Return the sudo authentication timeout in minutes

audit_sudo_authentication_timeout

Return instances of NOPASSWD:  in sudo configuration files.

audit_sudo_nopasswd

Returns a list of any ungrouped sudo configuration entries that contain !authenticate.

audit_sudo_re_authentication

audit_suid_executables

Audit system commands permission, ownership and group ownership

audit_system_command_permission

Audit system device files are correctly labeled 

audit_system_device_files

This task audits system file permissions against their defaults

audit_system_file_permissions

Audits system files and commands to ensure the cryptographic hashes match the vendor's published values.

audit_system_files_and_commands

Returns a list of all unconfined services

audit_unconfined_services

Returns a list of any unowned files and directories

audit_ungrouped_files_and_directories

audit_unowned_files_and_directories

audit_user_homedir

Returns a list of any world-writable directories not owned by a service account

audit_world_writable_directories

Audit world writable directories based on GID

audit_world_writable_directories_gid

Returns a list of any world-writable files

audit_world_writable_files

Report all the locations of grub.cfg files on the system

bootloader_on_removable_media

A convenience task to delete files on nodes.

delete_files

Finds and deletes .shosts and shosts.equiv files on the target system. Satisfies RHEL 7 DISA STIG V-204606 and V-204607.

delete_shosts

Checks for users with blank passwords in /etc/shadow and sets the passwords to the default

enforce_user_passwords

Returns all the tunnels configured in '/etc/ipsec.conf' and '/etc/ipsec.d'.

ipsec_configured_tunnels

Finds local module acceptance tests and returns stuctured data about them

litmus_get_acpt_test_data

litmus_provision_el7

litmus_provision_el8

Report the current installed version of the Red Hate Operating System

operating_system_version_check

Report all installed packages on the system to check whether the security patches or update are installed.

Modules

Discover

Contribute

Puppet

Premium features

Downloads

Resources

About Forge

Getting Started

Refine Results

Compatibility

Quality Score

Module scoring

Endorsements

Supported

Partner

Approved

Features

Premium

Bolt Tasks

PDK

Latest Release

Showing 1-2 of 2 results with tag comply

PDK

Premium

Bolt Tasks

PDK

Premium

Bolt Tasks

Modules

Discover

Contribute

Puppet

Premium features

Downloads

Resources

About Forge

Getting Started

Refine Results

Compatibility

Quality ScoreModule scoringModules on the Puppet Forge are automatically assigned a score based on Puppet's code standards to help you estimate their quality.

Endorsements

Features

Latest Release

Showing 1-2 of 2 results with tag comply

Quality Score