Table of Contents

• Description
  • This is a SIMP module
• Setup
  • What cron affects
• Usage
• Reference
• Limitations
• Development

Description

This module manages the cron packages, service, and /etc/cron.allow.

This is a SIMP module

This module is a component of the System Integrity Management Platform, a compliance-management framework built on Puppet.

If you find any issues, they can be submitted to our JIRA.

This module is optimally designed for use within a larger SIMP ecosystem, but it can be used independently:

• When included within the SIMP ecosystem, security compliance settings will be managed from the Puppet server.

Setup

What cron affects

• crond service
• /etc/cron.deny
• /etc/cron.allow
• tmpwatch package (if EL6)

Usage

To use this module, just call the class. This example adds it to a class list in hiera:

---
classes:
  - cron

Users can also be added to /etc/cron.allow with the cron::user defined type, or the cron::users array in hiera. The following example adds a few users to /etc/cron.allow:

cron::users:
  - foo
  - bar

Reference

See REFERENCE.md for details.

Limitations

SIMP Puppet modules are generally intended for use on Red Hat Enterprise Linux and compatible distributions, such as CentOS. Please see the metadata.json file for the most up-to-date list of supported operating systems, Puppet versions, and module dependencies.

Development

Please read our [Contribution Guide] (https://simp.readthedocs.io/en/stable/contributors_guide/index.html).

Reference

Table of Contents

Classes

• cron: Manages /etc/cron.allow and /etc/cron.deny, the cron packages, and the cron service.
• cron::install: Installs cron
• cron::service: Manages the cron service

Defined types

• cron::user: Add the user $name to /etc/cron.allow

Classes

cron

Manages /etc/cron.allow and /etc/cron.deny, the cron packages, and the cron service.

Parameters

The following parameters are available in the cron class:

• install_tmpwatch
• manage_packages
• users
• add_root_user

install_tmpwatch

Data type: Boolean

Force installation of the tmpwatch package

• In module data

manage_packages

Data type: Boolean

Enable management of the cron-related packages

Default value: true

users

Data type: Array[String[1]]

An array additional cron users to be allowed, using the defined type cron::user

Default value: []

add_root_user

Data type: Boolean

Ensure that the root user is added to the catalog by default

Default value: true

cron::install

Installs cron

Parameters

The following parameters are available in the cron::install class:

• install_tmpwatch
• cron_packages
• package_ensure

install_tmpwatch

Data type: Boolean

Whether or not to install the 'tmpwatch' package

• In module data

cron_packages

Data type: Array[String[1]]

The packages required for cron

Default value: ['cronie']

package_ensure

Data type: String[1]

The ensure parameter for installed packages

Default value: simplib::lookup('simp_options::package_ensure', { 'default_value' => 'installed' })

cron::service

Manages the cron service

Parameters

The following parameters are available in the cron::service class:

• service_name
• enable

service_name

Data type: String[1]

The name of the service

Default value: 'crond'

enable

Data type: Boolean

Enable the $service_name service

Default value: true

Defined types

cron::user

Add the user $name to /etc/cron.allow

Parameters

The following parameters are available in the cron::user defined type:

• name
• pam

name

The user to add to /etc/cron.allow

pam

Data type: Boolean

Add a pam::access::rule entry for $name to allow shell/login access

Default value: simplib::lookup('simp_options::pam', { 'default_value' => false })

• Wed Feb 07 2024 Mike Riddle mike@sicura.us - 0.8.0

• [puppetsync] Update metadata upper bounds for puppet-nsswitch, puppet-gitlab, puppet-snmp, simp-pam, and simp-useradd

• Wed Jan 17 2024 Richard Gardner rick@sicura.us - 0.7.1

• Updated hiera.yaml facts to support puppet 8

• Mon Oct 23 2023 Steven Pritchard steve@sicura.us - 0.7.0

• [puppetsync] Add EL9 support

• Wed Oct 11 2023 Steven Pritchard steve@sicura.us - 0.6.0

• [puppetsync] Updates for Puppet 8
  • These updates may include the following:
    • Update Gemfile
    • Add support for Puppet 8
    • Drop support for Puppet 6
    • Update module dependencies

• Wed Aug 23 2023 Steven Pritchard steve@sicura.us - 0.5.0

• Add AlmaLinux 8 support

• Mon Jun 12 2023 Chris Tessmer chris.tessmer@onyxpoint.com - 0.4.0

• Add RockyLinux 8 support

• Sun Feb 13 2022 Trevor Vaughan trevor@sicura.us - 0.3.1

• Added support for Amazon Linux 2

• Tue Jun 15 2021 Chris Tessmer chris.tessmer@onyxpoint.com - 0.3.0

• Removed support for Puppet 5
• Ensured support for Puppet 7 in requirements and stdlib

• Thu Jan 07 2021 Chris Tessmer chris.tessmer@onyxpoint.com - 0.2.1

• Removed EL6 support

• Wed Dec 11 2019 Trevor Vaughan tvaughan@onyxpoint.com - 0.2.0

• Minor code refactor
• Manage cron packages by default
• Update supported version of simp-simplib
• Add EL8 support
• Move PAM to an optional dependency

• Fri Aug 02 2019 Robert Vincent pillarsdotnet@gmail.com - 0.2.0

• Remove Puppet 4 support
• Add Puppet 6 support
• Add puppetlabs-stdlib 6 support
• Add puppetlabs/concat 6 support

• Mon Mar 25 2019 Jeanne Greulich jeanne.greulich@onyxpoint.com - 0.1.2

• Replace simpcat with concat

• Mon Mar 04 2019 Liz Nemsick lnemsick.simp@gmail.com - 0.1.1

• Fix a bad URL in the README.md
• Expand the range of stdlib Puppet module versions required in metadata.json

• Wed Oct 31 2018 Jeanne Greulich jeanne.greulich@onyxpoint.com - 0.1.0

• asset updates to make sure puppet 5 tests are running.

• Fri Sep 07 2018 Liz Nemsick lnemsick.simp@gmail.com - 0.1.0

• Update Hiera 4 to Hiera 5

• Thu Mar 29 2018 Trevor Vaughan tvaughan@onyxpoint.com - 0.1.0

• Added OEL and Puppet 5 support

• Fri May 19 2017 Nick Miller nick.miller@onyxpoint.com - 0.0.2

• Removed deprecated audit metaparameter
• Added basic acceptance test
• Made sure the cron::user class doesn't use the pam module if pam is false
• Update puppet dependency and remove OBE pe dependency in metadata.json

• Thu Dec 8 2016 Nick Miller nick.miller@onxypoint.com - 0.0.1

• First cut
• Content moved from simplib, added tests