History

Alex Kavanagh 4e1ecd55b8 Bring ceph-osd to Python 3 * Synced version of charm-helpers * Synced version of charms.ceph to bring in Py3 compatible library methods. Change-Id: I5ac45740f48a71d9cb0c5943472fc8590a723514		2017-11-17 12:13:54 +00:00
..
apache	Sync charm-helpers	2017-08-24 16:47:32 -05:00
audits	Bring ceph-osd to Python 3	2017-11-17 12:13:54 +00:00
defaults	Upgrade OSDs one at a time when changing ownership	2017-03-28 12:45:42 -07:00
host	Upgrade OSDs one at a time when changing ownership	2017-03-28 12:45:42 -07:00
mysql	Resync charmhelpers for licensing change	2016-07-06 16:29:43 +01:00
ssh	Upgrade OSDs one at a time when changing ownership	2017-03-28 12:45:42 -07:00
README.hardening.md	Add hardening support	2016-03-24 11:14:47 +00:00
__init__.py	Resync charmhelpers for licensing change	2016-07-06 16:29:43 +01:00
harden.py	Resync charmhelpers for licensing change	2016-07-06 16:29:43 +01:00
templating.py	Enable Ocata Amulet Tests	2017-03-23 09:29:00 +00:00
utils.py	Resync charmhelpers for licensing change	2016-07-06 16:29:43 +01:00

Juju charm-helpers hardening library

Description

This library provides multiple implementations of system and application hardening that conform to the standards of http://hardening.io/.

Current implementations include:

Synchronise this library into your charm and add the harden() decorator (from contrib.hardening.harden) to any functions or methods you want to use to trigger hardening of your application/system.
Add a config option called 'harden' to your charm config.yaml and set it to a space-delimited list of hardening modules you want to run e.g. "os ssh"
Override any config defaults (contrib.hardening.defaults) by adding a file called hardening.yaml to your charm root containing the name(s) of the modules whose settings you want override at root level and then any settings with overrides e.g.

os: general: desktop_enable: True
Now just run your charm as usual and hardening will be applied each time the hook runs.