bugfix: remove duplicate desktop_enabled entry
added Artem and Frank in the list of contributors+kudos

for their original work in porting chef-os-hardening to puppet. This has been 2 years in the making, since the original was ported. Thank you both for this great effort! :)

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
updated name from os_hardening -> hardening/os_hardening

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
added function to check if a file exists

needed for removing attributes from blacklisted files

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
ignorant implemetnation of simple file blacklisting

this also imports all current chef parameters for blacklists and whitelists and creates the basic structure we will use

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
move combination function from puppet to ruby code

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
removed file_exists facter script

it doesn't work as it should, complains about return value missing.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
replace file-resourcing with exec for suid bit removal

since the whole file_exists attempt ate resources and kept erroring on, i took a step back and implemented a simple exec which supports a nice onlyif clause. This is not a good implementation, I really don't like it. But unlike the other one, it works as it should. So it goes in for now.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
feature: remove suid/sgid bits from unkown files

merged a previous script into this, as a stepping stone for now.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
add suid_sgid class to init

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
added suid/sgid class parameters to readme

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>