Puppet Class: secure_windows::stig::v73251

Defined in:
manifests/stig/v73251.pp

Overview

This class manages: V-73251 Permissions for program file directories must conform to minimum requirements. V-73253 Permissions for the Windows installation directory must conform to minimum requirements.

Parameters:

  • enforced (Boolean) (defaults to: false) 


6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
 
# File 'manifests/stig/v73251.pp', line 6

class secure_windows::stig::v73251 (
  Boolean $enforced = false,
) {
  if $enforced {
    acl { ['C:\\Program Files', 'C:\\Program Files (x86)', 'C:\\Windows']:
      inherit_parent_permissions => false,
      permissions                => [
        {
          'identity' => 'NT SERVICE\\TrustedInstaller',
          'rights'   => ['full'],
          'affects'  => 'self_only'
        },
        {
          'identity'    => 'NT SERVICE\\TrustedInstaller',
          'rights'      => ['full'],
          'child_types' => 'containers',
          'affects'     => 'children_only'
        },
        {
          'identity' => 'S-1-5-18',
          'rights'   => ['modify'],
          'affects'  => 'self_only'
        },
        {
          'identity' => 'S-1-5-18',
          'rights'   => ['full'],
          'affects'  => 'children_only'
        },
        {
          'identity' => 'S-1-5-32-544',
          'rights'   => ['modify'],
          'affects'  => 'self_only'
        },
        {
          'identity' => 'S-1-5-32-544',
          'rights'   => ['full'],
          'affects'  => 'children_only'
        },
        {
          'identity' => 'S-1-5-32-545',
          'rights'   => ['read', 'execute'],
          'affects'  => 'self_only'
        },
        {
          'identity' => 'S-1-5-32-545',
          'rights'   => ['read', 'execute'],
          'affects'  => 'children_only'
        },
        {
          'identity' => 'S-1-3-0',
          'rights'   => ['full'],
          'affects'  => 'children_only'
        },
        {
          'identity' => 'S-1-15-2-1',
          'rights'   => ['read', 'execute'],
          'affects'  => 'self_only'
        },
        {
          'identity' => 'S-1-15-2-1',
          'rights'   => ['read', 'execute'],
          'affects'  => 'children_only'
        },
        {
          'identity' => 'S-1-15-2-2',
          'rights'   => ['read', 'execute'],
          'affects'  => 'self_only'
        },
        {
          'identity' => 'S-1-15-2-2',
          'rights'   => ['read', 'execute'],
          'affects'  => 'children_only'
        },
      ],
    }
  }
}