Compliance modules library

The OpenSVC nodeware packages some base modules.

com.opensvc.sys.cron

Description

This module checks that cron entries are installed. It implements the check, fixable and fix entry points. If the system runing the module supports split crontabs (/etc/cron.d), this layout is preferred.

This module is used to deploy the compliance check runs.

Supported operating systems

All operating systems supported by OpenSVC nodeware.

Rules

Variable name must start with 'cron_entry_'.

Example:

cron_entry_compliance

Variable value fields:

Example:

add:root:0 5 * * 0:[ -x /opt/opensvc/bin/nodemgr ] && /opt/opensvc/bin/nodemgr compliance check:opensvc

com.opensvc.sys.user

Description

This module checks that users are correctly set up. It implements the check and fix entry points. The following user properties are supported:

Supported operating systems

SunOS variants and Linux.

Rules

Variable name must start with 'user_'.

Variable value is a json serialized dictionnary in the following form:

{'opensvc': {'uid': 1003, 'gid':1003, 'shell': '/bin/bash', 'homedir': '/home/opensvc'},}

Dictionnary keys:

All keys need not be defined. If a key is not set, no check is performed on this key.