Class kernel::kernel
In: /tmp/puppet/modules/kernel/manifests/init.pp
Parent:

Module: kernel

Class: kernel

Description:

      This class sets various Kernel paramaters and removes wirless drivers.

Defines:

      None

LinuxGuide:

      2.5.1.1
      2.5.1.2

CCERef#:

        CCE-4151-7, CCE-3561-8, CCE-4155-8, CCE-3339-9, CCE-4320-8, CCE-3644-2
        CCE-4217-6, CCE-3840-6, CCE-3472-8, CCE-4186-3, CCE-4080-8, CCE-4091-5
        CCE-4236-6, CCE-4133-5, CCE-4265-5, CCE-4170-7

###############################################################################

Resources

Resources

Augeas::Basic-change["Network Kern Parms, 2.5.1"]
   file => "/etc/sysctl.conf"
   lens => "sysctl.lns"
   changes => ["set net.ipv4.ip_forward 0", "set net.ipv4.conf.all.send_redirects 0", "set net.ipv4.conf.default.send_redirects 0", "set net.ipv4.conf.all.accept_source_route 0", "set net.ipv4.conf.all.accept_redirects 0", "set net.ipv4.conf.all.secure_redirects 0", "set net.ipv4.conf.all.log_martians 1", "set net.ipv4.conf.default.accept_source_route 0", "set net.ipv4.conf.default.accept_redirects 0", "set net.ipv4.conf.default.secure_redirects 0", "set net.ipv4.icmp_echo_ignore_broadcasts 1", "set net.ipv4.icmp_ignore_bogus_error_messages 1", "set net.ipv4.tcp_syncookies 1", "set net.ipv4.conf.all.rp_filter 1", "set net.ipv4.conf.default.rp_filter 1"]
Augeas::Basic-change["disable Zeroconf, 3.3.9.3"]
   file => "/etc/sysconfig/network"
   lens => "shellvars.lns"
   changes => "set NONZEROCONF yes"

GuideSection 3.3.9.3 Disable zeroconf

Exec["Rem wireless driver, 2.5.2.2.3"]
   command => "/bin/rm -r /lib/modules/*/kernel/drivers/net/wireless"
   onlyif => "/usr/bin/test -e /lib/modules/*/kernel/drivers/net/wireless"
   user => "root"

GuideSection 2.5.2.2.3 CCE-4170-7 Remove wireless drivers

[Validate]