Class fstab::fstab
In: /tmp/puppet/modules/fstab/manifests/init.pp
Parent:

Module: fstab

Class: fstab

Description:

      This class ensures potentially dangerous partitions are mounted with
        restrictive options.

Defines:

      set-mount-options - for setting a mount option on all of a specific file
        system type in the fstab

LinuxGuide:

      2.2.1.1
        2.2.1.2
        3.13.3.2

CCERef#:

        CCE-4249-9
        CCE-4024-6
        CCE-4368-7
        CCE-4526-0

TODO:

      Determine how to isolate removable partitions locally mounted.

Resources

Resources

Augeas["fstab-non-root-nodev"]
   context => "/files/etc/fstab/*[file != '/'][count(opt[. = 'nodev']) = 0]"
   changes => ["ins opt after opt[last()]", "set opt[last()] nodev"]
   onlyif => "match /files/etc/fstab/*[file != '/'][count(opt[. = 'nodev']) = 0] size > 0"

GuideSection 2.2.1.1 Add nodev option to Non-Root Local Partitions

Set-mount-options["nfs_noexec"]
   fstype => "nfs"
   option => "noexec"
Set-mount-options["nfs_nosuid"]
   fstype => "nfs"
   option => "nosuid"

[Validate]