The arildjensen/cis module
The next module we'll take a look at is the CIS module by arildjensen. This module implements the Center for Internet Security benchmark standard for RHEL 6. In terms of support, this module lags a bit since it only supports Red Hat 6-based operating systems. However, it can serve as a great base for building your own module for another Unix-/Linux-like operating system.
The CIS benchmarks are a set of configuration standards that establish a baseline or benchmark for a secure system. It is a widely used and accepted set of standards, referenced in the PCI DSS standards and others.
The CIS benchmarks exist for a variety of operating systems and applications, including VMware, Apache Tomcat, and others.
Note
For more information ...
Get Learning Puppet Security now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
