Puppet Class: secure_windows::stig::v73369

Defined in:
manifests/stig/v73369.pp

Overview

This class manages: V-73369 Maintain the permissions on NTDS database and log files

Parameters:

  • enforced (Boolean) (defaults to: false) 


4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
 
# File 'manifests/stig/v73369.pp', line 4

class secure_windows::stig::v73369 (
  Boolean $enforced = false,
) {
  if $enforced {
    if $facts['windows_server_type'] == 'windowsdc' {
      $ntds_files = union($facts['database_log_files'], [$facts['ntds_parameters']['DSA Database file']])

      acl { $ntds_files:
        group                      => 'S-1-5-18',
        inherit_parent_permissions => true,
        owner                      => 'S-1-5-32-544',
        permissions                => [
          {
            'identity' => 'S-1-5-18',
            'rights'   => ['full'],
            'affects'  => 'self_only'
          },
          {
            'identity' => 'S-1-5-32-544',
            'rights'   => ['full'],
            'affects'  => 'self_only'
          }
        ],
      }
    }
  }
}