Puppet Class: secure_windows::stig::v73379

Defined in:
manifests/stig/v73379.pp

Overview

This class manages: V-73379 Data files owned by users must be on a different logical partition from the directory server data files.

Parameters:

  • enforced (Boolean) (defaults to: false) 


4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
 
# File 'manifests/stig/v73379.pp', line 4

class secure_windows::stig::v73379 (
  Boolean $enforced = false,
) {
  if $enforced {
    if $facts['windows_server_type'] == 'windowsdc' {
      $dsa_database_partition = regsubst($facts['ntds_parameters']['DSA Database file'], '^(.*:).*$', '\1')
      $hash_of_shares = $facts['shares']
      $hash_of_shares.each |$name,$path| {
        if $name =~ /^SYSVOL/ {

        }
        elsif $name =~ /^NETLOGON/ {

        }
        elsif $name =~ /^ADMIN\$/ {

        }
        elsif $name =~ /^.{1}\$/ {

        }
        elsif $name =~ /^print\$/ {

        }
        else {
          if $path =~ $dsa_database_partition {
            notify { "Share ${path} violates V-73379":
              message  => "Not in compliance with DoD STIG V-73379. Share ${path} is a user drive on the same partition as ${facts['ntds_parameters']['DSA Database file']}",# lint:ignore:140chars
              loglevel => warning,
            }
          }
        }
      }
    }
  }
}