Rudder plugins » CIS

On control point 3.1.2, the {const.dollar} needs to be removed as resources_dir is not a parameter defined in the benchmark. Plus, the control should only be implemented on audit, then replacing _audit_and_enforce_items by _audit_items.

_3_1_2 = hardening.Leaf {
    _item_nb = "3.1.2" 
    id = "62c4ac54-0109-44c1-b52c-5dbafcfb5ebe" 
    _audit_and_enforce_items = [rudder.Method {
      method = "audit_from_command" 
        params = {
            command = r"/usr/bin/env bash ${const.dollar}{resources_dir}/3_1_2_wireless_interfaces_are_disabled.sh" 
            compliant_codes = "0" 
        }
    }]
}