# encoding: utf-8 # ~FC061

#
# Copyright 2014, Deutsche Telekom AG
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

name             'chef-os-hardening'
maintainer       'Dominik Richter'
maintainer_email 'dominik.richter@googlemail.com'
license          'Apache-2.0'
description      'Installs and configures operating system hardening'
long_description IO.read(File.join(File.dirname(__FILE__), 'README.md'))
version          '3.1.0'

chef_version '>= 12.5' if respond_to?(:chef_version)

supports 'amazon'
supports 'ubuntu', '>= 14.04'
supports 'debian', '>= 6.0'
supports 'centos', '>= 6.0'
supports 'redhat', '>= 6.0'
supports 'oracle', '>= 6.4'
supports 'fedora', '>= 26.0'
supports 'suse'
supports 'opensuseleap', '>= 42.1'

depends 'sysctl', '~> 1.0'

recipe 'chef-os-hardening::default', 'harden the operating system (all recipes)'
recipe 'chef-os-hardening::limits', 'prevent core dumps'
recipe 'chef-os-hardening::login_defs', 'harden /etc/login.defs'
recipe 'chef-os-hardening::minimize_access', 'enforce minimal file permissions'
recipe 'chef-os-hardening::pam', 'configure sane values for PAM'
recipe 'chef-os-hardening::profile', 'harden settings in /etc/profile.d'
recipe 'chef-os-hardening::securetty', 'limit the allowed TTYs for root login'
recipe 'chef-os-hardening::suid_sgid', 'reduce SUID and SGID bits in the filesystem'
recipe 'chef-os-hardening::sysctl', 'set sane sysctl values'

source_url 'https://github.com/dev-sec/chef-os-hardening'
issues_url 'https://github.com/dev-sec/chef-os-hardening/issues'
