Rudder plugins » CIS

Bug #27342

Updated by Lucas FRANCOIS 8 days ago

On control point *2.21*, the _value_ is inverted with the _key_ in the method. It needs to be *inet_interfaces = loopback-only* and not *loopback-only = inet_interfaces*. Plus, we can remove the names in the methods, they are no longer required. 
 <pre> 
   _audit_and_enforce_items = [ 
     rudder.Method { 
       name = "Force the Mail Transfer Agent to listen only on loopback address" 
       method = "file_key_value_present" 
       params = { 
         path = "/etc/postfix/main.cf" 
         value = "inet_interfaces" 
         key = "loopback-only" 
         separator = r"${ncf_const.s}=${ncf_const.s}" 
       } 
     } 
     rudder.Method { 
       name = "Restart the Mail Transfer Agent if needed" 
       method = "service_restart" 
       params = {name = "postfix"} 
       condition = "file_key_value_present__etc_postfix_main_cf_repaired" 
     } 
   ] 
 </pre> inet_interfaces*

Back