Book Image

Learning Puppet Security

Book Image

Learning Puppet Security

Overview of this book

Related Content you might be interested in

Current Title:

Small book image
Learning Puppet Security
Mar, 2015 | 236 pages
No titles found
Table of Contents (17 chapters)
Learning Puppet Security
Learning Puppet Security
Credits
Credits
About the Author
About the Author
About the Reviewers
About the Reviewers
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Puppet as a Security Tool
Puppet as a Security Tool
What is Puppet?
Installing and configuring Puppet
Preparing the environment for examples
Puppet for security and compliance
Example – using Puppet to secure openssh
Summary
2
Tracking Changes to Objects
Tracking Changes to Objects
Change tracking with Puppet
The audit meta-parameter
Using audit on files
Auditing the password file
Audit on other resource types
Auditing a package
Things to know about audit
Alternatives to auditing
Using noop
Summary
3
Puppet for Compliance
Puppet for Compliance
Using manifests to document the system state
Tracking history with version control
Facts for compliance
The PCI DSS and how Puppet can help
Summary
4
Security Reporting with Puppet
Security Reporting with Puppet
Basic Puppet reporting
PuppetDB and reporting
Reporting for compliance
Summary
5
Securing Puppet
Securing Puppet
Puppet security related configuration
SSL and Puppet
Autosigning certificates
Summary
6
Community Modules for Security
Community Modules for Security
The Puppet Forge
The herculesteam/augeasproviders series of modules
The arildjensen/cis module
The saz/sudo module
The hiera-eyaml gem
Summary
7
Network Security and Puppet
Network Security and Puppet
Introducing the firewall module
The firewall type
The firewallchain type
Creating pre and post rules
Adding firewall rules to other modules
Summary
8
Centralized Logging
Centralized Logging
Welcome to logging happiness
Logstash and Puppet
Installing Elasticsearch
Reporting on log data
Configuring hosts to report log data
Summary
9
Puppet and OS Security Tools
Puppet and OS Security Tools
Introducing SELinux and auditd
SELinux and Puppet
Configuring SELinux with community modules
Configuring auditd with community modules
Summary
Going Forward
Going Forward
What we've learned
Where to go next
Final thoughts
Index
Index

Credits

Author

Jason Slagle

Reviewers

Vlastimil Holer

Jeroen Hooyberghs

Michael J. Ladd

Stephen McNally

Marcus Young

Commissioning Editor

Dipika Gaonkar

Acquisition Editor

Meeta Rajani

Content Development Editor

Akshay Nair

Technical Editors

Tanmayee Patil

Sebastian Rodrigues

Copy Editors

Sonia Michelle Cheema

Rashmi Sawant

Wishva Shah

Project Coordinator

Mary Alex

Proofreaders

Simran Bhogal

Maria Gould

Paul Hindle

Linda Morris

Indexer

Tejal Soni

Production Coordinator

Shantanu N. Zagade

Cover Work

Shantanu N. Zagade

Previous Section
Next Chapter