Class services::services
In: /tmp/puppet/modules/services/manifests/init.pp
Parent:

Class: services

Module: services

File: /etc/puppet/modules/services/manifests/init.pp

Description:

        This module is made specifically to enable and disable appropriate
        services for WORKSTATIONS only, not for servers.  Special exemptions
        must be made for specific servers to enable specific services, and
        this class is likely to become very unweildy if those changes are
        incorporated inside this module.

Guide References:

        2.1.2.2, 3.1.2, 3.2.1, 3.2.2, 3.2.2.1, 3.2.3.1, 3.2.3.3,
        3.2.4, 3.2.4, 3.2.5, 3.3.1, 3.3.10, 3.3.11, 3.3.12,
        3.3.13.1, 3.3.13.2, 3.3.14.1, 3.3.14.2, 3.3.15.1,
        3.3.15.2, 3.3.2, 3.3.3, 3.3.4, 3.3.5, 3.3.6,
        3.3.7, 3.3.8, 3.4.1, 3.6.1.3.2, 3.8.3,
        3.9.3, 3.15.1, 3.16.1, 3.18.1, 3.19,
        3.20.1

CCE Reference:

        CCE-3416-5, CCE-4023-8, CCE-4252-3, CCE-4164-0,
        CCE-4234-1, CCE-3390-2, CCE-4330-7, CCE-3974-3,
        CCE-4141-8, CCE-3537-8, CCE-3705-1, CCE-4348-9,
        CCE-4273-9, CCE-3916-4, CCE-4421-4, CCE-4302-6,
        CCE-4355-4, CCE-4377-8, CCE-4286-1, CCE-3425-6,
        CCE-4074-1, CCE-3919-8, CCE-4338-0, CCE-4308-3,
        CCE-4336-4, CCE-3765-5

Resources

Resources

File["/etc/X11/xinit/xserverrc"]
   content => "exec X :0 -nolisten tcp $@"
Package["dhcp"]
   ensure => absent

remove unneeded services GuideSection 3.2.1, 3.2.2, 3.2.2.1, 3.2.3.1, 3.2.3.3, 3.2.4, 3.2.5

Package["inetd"]
   ensure => absent
Package["krb5-workstation"]
   ensure => absent
Package["net-snmp"]
   ensure => absent
Package["rsh"]
   ensure => absent
Package["rsh-server"]
   ensure => absent
Package["squid"]
   ensure => absent
Package["telnet"]
   ensure => absent
Package["telnet-server"]
   ensure => absent
Package["tftp-server"]
   ensure => absent
Package["vsftpd"]
   ensure => absent
Package["xinetd"]
   ensure => absent
Package["ypserv"]
   ensure => absent
Service["acpid", "cups", "restorecond", "smartd"]
   ensure => true
   hasstatus => true
   enable => true

GuideSection 3.1.2 settings for default services (where not specified in other modules)

Service["anacron", "dhcpd", "gpm", "haldaemon", "hplip", "httpd", "irqbalance", "kdump", "mdmonitor", "pcscd", "rhnsd", "snmpd", "smb", "squid", "vsftpd", "xfs", "ypbind"]
   ensure => false
   enable => false
   hasstatus => true

The services are disabled

Service["apmd", "bluetooth", "firstboot", "hidd", "kudzu", "messagebus", "microcode_ctl", "readahead_early", "readahead_later"]
   ensure => false
   enable => false

these services are disabled, but they dont have a working status function.

[Validate]