Puppet Class: secure_windows::stig::v73371

Defined in:
manifests/stig/v73371.pp

Overview

This class manages: V-73371 The Active Directory SYSVOL directory must have the proper access control permissions.

Parameters:

  • enforced (Boolean) (defaults to: false) 


4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
 
# File 'manifests/stig/v73371.pp', line 4

class secure_windows::stig::v73371 (
  Boolean $enforced = false,
) {
  if $enforced {
    if $facts['windows_server_type'] == 'windowsdc' {
      $sysvol_mount = regsubst($facts['shares']['SYSVOL'], '^(.+)/sysvol', '\1')

      acl { $sysvol_mount:
        group                      => 'S-1-5-32-544',
        inherit_parent_permissions => false,
        owner                      => 'S-1-5-32-544',
        permissions                => [
          {
            'identity' => 'S-1-5-11',
            'rights'   => ['read', 'execute'],
            'affects'  => 'self_only'
          },
          {
            'identity' => 'S-1-5-11',
            'rights'   => ['read', 'execute'],
            'affects'  => 'children_only'
          },
          {
            'identity' => 'S-1-5-32-549',
            'rights'   => ['read', 'execute'],
            'affects'  => 'self_only'
          },
          {
            'identity' => 'S-1-5-32-549',
            'rights'   => ['read', 'execute'],
            'affects'  => 'children_only'
          },
          {
            'identity' => 'S-1-5-32-544',
            'rights'   => ['mask_specific'],
            'mask'     => '2032063',
            'affects'  => 'self_only'
          },
          {
            'identity' => 'S-1-5-32-544',
            'rights'   => ['full'],
            'affects'  => 'children_only'
          },
          {
            'identity' => 'S-1-5-18',
            'rights'   => ['full'],
            'affects'  => 'self_only'
          },
          {
            'identity' => 'S-1-5-18',
            'rights'   => ['full'],
            'affects'  => 'children_only'
          },
          {
            'identity' => 'S-1-5-32-544',
            'rights'   => ['mask_specific'],
            'mask'     => '2032063',
            'affects'  => 'self_only'
          },
          {
            'identity' => 'S-1-3-0',
            'rights'   => ['full'],
            'affects'  => 'children_only'
          }
        ],
      }
    }
  }
}