crans/crans_bcfg2
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Pour des raisons de cohérence, perms est devenu mode

Browse source
This commit is contained in:
Pierre-Elliott Bécue 2015-05-10 15:19:17 +02:00
parent 2c75866ad9
commit 15902c8b57
156 changed files with 187 additions and 181 deletions
Download patch file Download diff file Expand all files Collapse all files

8
Rules/apt-mirror.xml
View file

@ -1,7 +1,7 @@
<!-- Règles pour apt-mirror //-->
<Rules priority="1">
<Path name="/mirror/apt-mirror" type="directory" owner="apt-mirror" group="apt-mirror" perms="0755"/>
<Path name="/mirror/apt-mirror/var" type="directory" owner="apt-mirror" group="apt-mirror" perms="0755"/>
<Path name="/mirror/apt-mirror/skel" type="directory" owner="apt-mirror" group="apt-mirror" perms="0755"/>
<Path name="/mirror/apt-mirror/mirror" type="directory" owner="apt-mirror" group="apt-mirror" perms="0755"/>
<Path name="/mirror/apt-mirror" type="directory" owner="apt-mirror" group="apt-mirror" mode="0755"/>
<Path name="/mirror/apt-mirror/var" type="directory" owner="apt-mirror" group="apt-mirror" mode="0755"/>
<Path name="/mirror/apt-mirror/skel" type="directory" owner="apt-mirror" group="apt-mirror" mode="0755"/>
<Path name="/mirror/apt-mirror/mirror" type="directory" owner="apt-mirror" group="apt-mirror" mode="0755"/>
</Rules>

6
Rules/isc-dhcp-server.xml
View file

@ -3,8 +3,8 @@
<Service name="isc-dhcp-server" type="deb" status="on"/>
<Path type="symlink" name="/etc/dhcp" to="/etc/dhcp3"/>
<Group name="isc-dhcp-server">
<Path type="directory" name="/etc/dhcp3/generated" perms="0755" owner="root" group="root"/>
<Path type="directory" name="/etc/dhcp3/dhclient-enter-hooks.d/" perms="0755" owner="root" group="root"/>
<Path type="directory" name="/etc/dhcp3/dhclient-exit-hooks.d/" perms="0755" owner="root" group="root"/>
<Path type="directory" name="/etc/dhcp3/generated" mode="0755" owner="root" group="root"/>
<Path type="directory" name="/etc/dhcp3/dhclient-enter-hooks.d/" mode="0755" owner="root" group="root"/>
<Path type="directory" name="/etc/dhcp3/dhclient-exit-hooks.d/" mode="0755" owner="root" group="root"/>
</Group>
</Rules>

32
Rules/iscsi.xml
View file

@ -13,26 +13,26 @@
<Path type="symlink" name="/etc/iscsi/send_targets/10.0.0.31,3260/iqn.1986-03.com.hp:storage.msa2012i.0831d5e399.a,10.0.0.31,3260,2,default" to="/etc/iscsi/nodesiqn.1986-03.com.hp:storage.msa2012i.0831d5e399.a/10.0.0.31,3260,2/default"/>
<!-- Droits sur les dossiers send_targets -->
<Path type="directory" name="/etc/iscsi/send_targets" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/send_targets/10.0.0.31,3260" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/send_targets/10.0.0.93,3260" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/send_targets" mode="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/send_targets/10.0.0.31,3260" mode="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/send_targets/10.0.0.93,3260" mode="0600" owner="root" group="root"/>
<!-- Droits sur les dossiers nodes -->
<Path type="directory" name="/etc/iscsi/nodes" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes" mode="0600" owner="root" group="root"/>
<!-- slon -->
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.msa2012i.0831d5e399.a" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.msa2012i.0831d5e399.a/10.0.0.30,3260,1" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.msa2012i.0831d5e399.a/10.0.0.31,3260,2" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.msa2012i.0831d5e399.a" mode="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.msa2012i.0831d5e399.a/10.0.0.30,3260,1" mode="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.msa2012i.0831d5e399.a/10.0.0.31,3260,2" mode="0600" owner="root" group="root"/>
<!-- nols -->
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.93,3260,1" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.94,3260,3" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.95,3260,5" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.96,3260,7" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.97,3260,2" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.98,3260,4" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.99,3260,6" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.100,3260,8" perms="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2" mode="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.93,3260,1" mode="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.94,3260,3" mode="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.95,3260,5" mode="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.96,3260,7" mode="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.97,3260,2" mode="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.98,3260,4" mode="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.99,3260,6" mode="0600" owner="root" group="root"/>
<Path type="directory" name="/etc/iscsi/nodes/iqn.1986-03.com.hp:storage.p2000g3.114213a1f2/10.0.0.100,3260,8" mode="0600" owner="root" group="root"/>
</Rules>

4
Rules/kgb-bot.xml
View file

@ -1,4 +1,4 @@
<Rules priority="1">
<Service type="deb" name="kgb-bot" status="on"/>
<Path name="/etc/kgb-bot" type="directory" perms="0755" owner="root" group="adm"/>
<Service type="deb" name="kgb-bot" status="ignore"/>
<Path name="/etc/kgb-bot" type="directory" mode="0755" owner="root" group="adm"/>
</Rules>

2
Rules/ldapcert.xml
View file

@ -1,3 +1,3 @@
<Rules priority="1">
<Path name="/etc/ssl/crans" type="directory" owner="root" group="root" perms="0755" />
<Path name="/etc/ssl/crans" type="directory" owner="root" group="root" mode="0755" />
</Rules>

2
Rules/owncloud.xml
View file

@ -1,3 +1,3 @@
<Rules priority="1">
<Path name="/home-owncloud" type="directory" owner="www-data" group="root" perms="0750" />
<Path name="/home-owncloud" type="directory" owner="www-data" group="root" mode="0750" />
</Rules>

2
Rules/rpcssh.xml
View file

@ -1,6 +1,6 @@
<Rules priority="1">
<Group name="rpcssh">
<Path name="/var/local/rpcssh/.ssh" type="directory" owner="rpcssh" group="users" perms="0700"/>
<Path name="/var/local/rpcssh/.ssh" type="directory" owner="rpcssh" group="users" mode="0700"/>
<!-- Uniquement à partir de la version 1.3 -->
<POSIXUser name="rpcssh" home="/var/local/rpcssh" shell="/bin/bash"
gecos="rpcssh" uid="666" group="users">

4
Rules/rsyslog.xml
View file

@ -1,12 +1,12 @@
<!-- Règles des serveurs/clients rsyslog //-->
<Rules priority="1">
<Group name="rsyslog-server">
<Path name="/var/spool/rsyslog" type="directory" owner="root" group="adm" perms="0750"/>
<Path name="/var/spool/rsyslog" type="directory" owner="root" group="adm" mode="0750"/>
</Group>
<Group name="rsyslog-client">
<Group name="rsyslog-server" negate="true">
<Path name="/var/log/spool" type="directory" owner="root" group="adm" perms="750"/>
<Path name="/var/log/spool" type="directory" owner="root" group="adm" mode="0750"/>
</Group>
</Group>
<Service type="deb" name="rsyslog" status="on"/>

8
Rules/rules.xml
View file

@ -1,10 +1,10 @@
<Rules priority="1">
<Group name="users">
<Path name="/etc/crans/secrets" type="directory" owner="respbats" group="adm" perms="0550"/>
<Path name="/etc/crans/secrets" type="directory" owner="respbats" group="adm" mode="0550"/>
</Group>
<Group name="vo">
<Path name="/etc/crans/secrets" type="directory" owner="respbats" group="adm" perms="0550"/>
<Path name="/etc/crans/secrets" type="directory" owner="respbats" group="adm" mode="0550"/>
</Group>
<Group name="mail-mx-main">
@ -14,11 +14,11 @@
<Group name="users" negate="true">
<Group name="vo" negate="true">
<Path name="/etc/crans/secrets" type="directory" owner="root" group="adm" perms="0550"/>
<Path name="/etc/crans/secrets" type="directory" owner="root" group="adm" mode="0550"/>
</Group>
</Group>
<Path name="/usr/scripts" type="directory" owner="root" group="adm" perms="2775"/>
<Path name="/usr/scripts" type="directory" owner="root" group="adm" mode="2775"/>
<!-- Suppression du groupe adm de /etc/group pour forcer sudo à regarder dans la base -->
<Action name="del-adm"

4
Rules/slapd.xml
View file

@ -1,8 +1,8 @@
<!-- Règles concernant les serveurs équipés de slapd//-->
<Rules priority="1">
<Group name="db-replicat">
<Path name="/etc/ldap/slapd.d" type="directory" owner="root" group="adm" perms="0750"/>
<Path name="/etc/ldap/templatedir" type="directory" owner="root" group="adm" perms="0750"/>
<Path name="/etc/ldap/slapd.d" type="directory" owner="root" group="adm" mode="0750"/>
<Path name="/etc/ldap/templatedir" type="directory" owner="root" group="adm" mode="0750"/>
<Action name="peupler-replicat" timing="post"
when="modified" status="check"
command="/etc/ldap/peupler-replicat"/>