Puppet Class: almalinux_hardening::system::grub2::cfg_perms

Defined in:
manifests/system/grub2/cfg_perms.pp

Summary

UEFI GRUB2 bootloader configuration

Overview

Puppet Module to perform AlmaLinux 8 OS Hardening with CIS benchmark. Copyright © 2022 Jonas Hügli

Examples:

include almalinux_hardening::system::grub2::cfg_perms


38
39
40
41
42
43
44
45
46
47
48
49
# File 'manifests/system/grub2/cfg_perms.pp', line 38

class almalinux_hardening::system::grub2::cfg_perms {
  if $almalinux_hardening::enable_grub2_cfg_perms {
    mount { 'cfg_perms':
      name    => '/boot/efi',
      device  => $facts['boot_efi_uuid'],
      options => 'umask=0177,shortname=winnt',
      fstype  => 'vfat',
      dump    => 0,
      pass    => 2,
    }
  }
}