added function to check if a file exists

needed for removing attributes from blacklisted files

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
ignorant implemetnation of simple file blacklisting

this also imports all current chef parameters for blacklists and whitelists and creates the basic structure we will use

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
move combination function from puppet to ruby code

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
removed file_exists facter script

it doesn't work as it should, complains about return value missing.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
replace file-resourcing with exec for suid bit removal

since the whole file_exists attempt ate resources and kept erroring on, i took a step back and implemented a simple exec which supports a nice onlyif clause. This is not a good implementation, I really don't like it. But unlike the other one, it works as it should. So it goes in for now.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
feature: remove suid/sgid bits from unkown files

merged a previous script into this, as a stepping stone for now.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
add suid_sgid class to init

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
added suid/sgid class parameters to readme

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
Merge pull request #1 from TelekomLabs/suid_sgid

feature: handle SUID and SGID bits
feature: add configurable system environment

running things like sysctl in a docker/lxc container doesn't work. to get around this issue and similar ones, make it configurable for OS-hardening

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>