Sign In Start Free Trial

Book Overview & Buying
Table Of Contents
Feedback & Rating

Learning Puppet Security

By : Slagle

4 (3)

Learning Puppet Security

4 (3)

By: Slagle

Overview of this book

If you are a security professional whose workload is increasing, or a Puppet professional looking to increase your knowledge of security, or even an experienced systems administrator, then this book is for you. This book will take you to the next level of security automation using Puppet. The book requires no prior knowledge of Puppet to get started.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Convention

Reader feedback

Customer support

Free Chapter

1. Puppet as a Security Tool

1. Puppet as a Security Tool

What is Puppet?

Installing and configuring Puppet

Preparing the environment for examples

Puppet for security and compliance

Example – using Puppet to secure openssh

Summary

2. Tracking Changes to Objects

2. Tracking Changes to Objects

Change tracking with Puppet

The audit meta-parameter

Using audit on files

Auditing the password file

Audit on other resource types

Auditing a package

Things to know about audit

Alternatives to auditing

Using noop

Summary

3. Puppet for Compliance

3. Puppet for Compliance

Using manifests to document the system state

Tracking history with version control

Facts for compliance

The PCI DSS and how Puppet can help

Summary

4. Security Reporting with Puppet

4. Security Reporting with Puppet

Basic Puppet reporting

PuppetDB and reporting

Reporting for compliance

Summary

5. Securing Puppet

5. Securing Puppet

Puppet security related configuration

SSL and Puppet

Autosigning certificates

Summary

6. Community Modules for Security

6. Community Modules for Security

The Puppet Forge

The herculesteam/augeasproviders series of modules

The arildjensen/cis module

The saz/sudo module

The hiera-eyaml gem

Summary

7. Network Security and Puppet

7. Network Security and Puppet

Introducing the firewall module

The firewall type

The firewallchain type

Creating pre and post rules

Adding firewall rules to other modules

Summary

8. Centralized Logging

8. Centralized Logging

Welcome to logging happiness

Logstash and Puppet

Installing Elasticsearch

Reporting on log data

Configuring hosts to report log data

Summary

9. Puppet and OS Security Tools

9. Puppet and OS Security Tools

Introducing SELinux and auditd

SELinux and Puppet

Configuring SELinux with community modules

Configuring auditd with community modules

Summary

A. Going Forward

A. Going Forward

What we've learned

Where to go next

Final thoughts

Index

Index

Customer Reviews

4 (3)

5 star

66.7%

4 star

0%

3 star

0%

2 star

33.3%

1 star

0%

Using audit on files

The most common use case for audit is auditing whether a given file has changed. The audit system was designed for a particular customer's needs by Puppet. Indications are that this need was largely around auditing files. For this reason, support around auditing files as well as documentation is the strongest for auditing the file type.

To use audit on a file, we add the audit meta-parameter to its declaration. For example:

file { '/etc/shells':
  audit => 'all',
}

This tells Puppet that it should audit every attribute on the file /etc/shells. If anything on this file changes, it will log messages in the local log file as well as generate report events indicating the changes.

Available attributes

On paper, any attribute is available to be audited. However, some attributes do not make sense. The Puppet language reference as of version 3.6 lists many available attributes for the file type. A current available list can be found at https://docs.puppetlabs...

Visually different images

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Learning Puppet Security

Search

Your notes and bookmarks