cfbs.json

{
  "name": "modules",
  "description": "Repository of modules written by the CFEngine team.",
  "type": "module",
  "provides": {
    "allow-all-hosts": {
      "description": "Allows all hosts / IP addresses to connect and fetch policy.",
      "subdirectory": "management/allow-all-hosts",
      "steps": ["json def.json def.json"]
    },
    "autorun": {
      "description": "Enable autorun functionality.",
      "subdirectory": "management/autorun",
      "steps": ["json def.json def.json"]
    },
    "autorun-bundles": {
      "description": "Enable automatic execution of bundles tagged 'autorun'.",
      "subdirectory": "management/autorun-bundles",
      "steps": ["json def.json def.json"]
    },
    "autorun-inputs": {
      "description": "Enable automatic loading of policy files in 'services/autorun/'.",
      "subdirectory": "management/autorun-inputs",
      "steps": ["json def.json def.json"]
    },
    "client-initiated-reporting": {
      "description": "Enable client initiated reporting and disable pull collection.",
      "subdirectory": "reporting/client-initiated-reporting",
      "steps": ["json def.json def.json"]
    },
    "conditional-installer": {
      "description": "Allows you to specify packages you want installed and conditions for where you want them installed, as well as a list of packages you generally want uninstalled.",
      "subdirectory": "security/conditional-installer",
      "steps": [
        "copy main.cf services/cfbs/modules/conditional-installer/main.cf",
        "input ./input.json def.json",
        "bundles conditional_installer:main",
        "policy_files services/cfbs/modules/conditional-installer/main.cf"
      ],
      "input": [
        {
          "type": "string",
          "variable": "packages_to_uninstall",
          "namespace": "conditional_installer",
          "bundle": "main",
          "label": "Uninstall",
          "question": "Which package(s) would you like to be uninstalled?"
        },
        {
          "type": "list",
          "variable": "packages_to_install",
          "namespace": "conditional_installer",
          "bundle": "main",
          "label": "Install",
          "subtype": [
            {
              "key": "packages",
              "type": "string",
              "label": "Package(s)",
              "question": "Package(s) to install"
            },
            {
              "key": "condition",
              "type": "string",
              "label": "Condition",
              "question": "Condition for where to install"
            },
            {
              "key": "why",
              "type": "string",
              "label": "Why",
              "question": "Why?",
              "default": "Unknown"
            }
          ],
          "while": "Do you want to specify more packages to be installed?"
        }
      ]
    },
    "delete-home-dotrhosts": {
      "description": "Ensure that ~/.rhosts files are not present, as they present a security risk.",
      "subdirectory": "security/delete-home-dotrhosts",
      "steps": [
        "copy policy/main.cf services/cfbs/delete-home-dotrhosts/",
        "policy_files services/cfbs/delete-home-dotrhosts/",
        "bundles delete_home_dotrhosts:main"
      ]
    },
    "delete-home-dotshosts": {
      "description": "Ensure that ~/.shosts files are not present, as they present a security risk.",
      "subdirectory": "security/delete-home-dotshots",
      "steps": [
        "copy policy/main.cf services/cfbs/delete-home-dotshots/",
        "policy_files services/cfbs/delete-home-dotshots/",
        "bundles delete_home_dotshosts:main"
      ]
    },
    "demo": {
      "description": "Enables convenient and insecure settings for demoing CFEngine.",
      "subdirectory": "management/demo",
      "dependencies": ["autorun", "every-minute"],
      "steps": ["json def.json def.json"]
    },
    "enable-aslr": {
      "description": "Ensure that Address space layout randomization (ASLR) is enabled on the system.",
      "subdirectory": "security/enable-aslr",
      "steps": [
        "copy enable-aslr.cf services/cfbs/modules/enable-aslr/enable-aslr.cf",
        "bundles enable_aslr",
        "policy_files services/cfbs/modules/enable-aslr/enable-aslr.cf"
      ]
    },
    "every-minute": {
      "description": "Make policy fetching, evaluation, and reporting happen every minute.",
      "subdirectory": "management/every-minute",
      "steps": ["json def.json def.json"]
    },
    "inventory-unshadowed-users": {
      "description": "Adds reporting data (inventory) on local users in /etc/passwd not using /etc/shadow for their password.",
      "subdirectory": "security/inventory-unshadowed-users",
      "dependencies": ["library-parsed-local-users"],
      "steps": [
        "copy policy/main.cf services/cfbs/inventory-unshadowed-users/",
        "policy_files services/cfbs/inventory-unshadowed-users/",
        "bundles inventory_unshadowed_users:main"
      ]
    },
    "library-for-promise-types-in-bash": {
      "description": "Library enabling promise types implemented in bash.",
      "subdirectory": "libraries/bash",
      "steps": ["copy cfengine.sh modules/promises/"]
    },
    "library-for-promise-types-in-python": {
      "description": "Library enabling promise types implemented in python.",
      "subdirectory": "libraries/python",
      "steps": ["copy cfengine.py modules/promises/"]
    },
    "maintainers-in-motd": {
      "description": "Add maintainer and purpose information from CMDB to /etc/motd",
      "subdirectory": "security/maintainers-in-motd",
      "steps": [
        "copy ./maintainers-in-motd.cf services/cfbs/modules/maintainers-in-motd.cf",
        "policy_files services/cfbs/modules/maintainers-in-motd.cf",
        "bundles maintainers_in_motd"
      ]
    },
    "promise-type-ansible": {
      "description": "Promise type to manage systemd services.",
      "subdirectory": "promise-types/ansible",
      "dependencies": ["library-for-promise-types-in-python"],
      "steps": [
        "copy ansible_promise.py modules/promises/",
        "append enable.cf services/init.cf"
      ]
    },
    "promise-type-git": {
      "description": "Promise type to manage git repos.",
      "subdirectory": "promise-types/git",
      "dependencies": ["library-for-promise-types-in-python"],
      "steps": [
        "copy git.py modules/promises/",
        "append enable.cf services/init.cf"
      ]
    },
    "promise-type-groups": {
      "description": "Experimental promise type to manage local user groups.",
      "subdirectory": "promise-types/groups",
      "dependencies": ["library-for-promise-types-in-python"],
      "steps": [
        "copy groups.py modules/promises/",
        "append enable.cf services/init.cf"
      ]
    },
    "promise-type-systemd": {
      "description": "Promise type to manage systemd services.",
      "subdirectory": "promise-types/systemd",
      "dependencies": ["library-for-promise-types-in-python"],
      "steps": [
        "copy systemd.py modules/promises/",
        "append enable.cf services/init.cf"
      ]
    },
    "promise-type-ini": {
      "description": "A Custom CFEngine promise module, installing, and using the Ansible INI module to provide an INI promise type for INI files",
      "subdirectory": "promise-types/ini",
      "dependencies": ["library-for-promise-types-in-python"],
      "steps": [
        "copy ini.py modules/promises/",
        "append enable.cf services/init.cf"
      ]
    },
    "uninstall-packages": {
      "description": "Allows you to specify a list of packages you want uninstalled on your hosts.",
      "subdirectory": "security/uninstall-packages",
      "steps": [
        "copy uninstall-packages.cf services/cfbs/modules/uninstall-packages/uninstall-packages.cf",
        "input uninstall-packages/input.json def.json",
        "bundles uninstall_packages:uninstall_packages",
        "policy_files services/cfbs/modules/uninstall-packages/uninstall-packages.cf"
      ],
      "input": [
        {
          "type": "list",
          "variable": "package_names",
          "namespace": "uninstall_packages",
          "bundle": "uninstall_packages",
          "label": "Packages to uninstall",
          "subtype": [
            {
              "key": "name",
              "type": "string",
              "label": "Package name",
              "question": "Package name"
            },
            {
              "key": "why",
              "type": "string",
              "label": "Why",
              "question": "Why should this package be uninstalled?",
              "default": "Unknown"
            }
          ],
          "while": "Do you want to specify more packages to be uninstalled?"
        }
      ]
    },
    "uninstall-rsh-server": {
      "description": "Ensure the remote shell (rsh) server package is not installed on the system.",
      "subdirectory": "security/uninstall-rsh-server",
      "steps": [
        "copy uninstall-rsh-server.cf services/cfbs/modules/uninstall-rsh-server/uninstall-rsh-server.cf",
        "bundles uninstall_rsh_server",
        "policy_files services/cfbs/modules/uninstall-rsh-server/uninstall-rsh-server.cf"
      ]
    }
  }
}