arildjensen/cis-puppet — pull request #5 by mhuffnagle (2013-10-15 20:37:10+00:00)
Title: yum.conf supplied by this module overwrites other changes users have made

The class for making sure that gpgcheck=1 in yum.conf has a hard-coded file that is used as the source. Any other changes that have been made to that configuration file will be overwritten. Instead of using a source file, it would be better to use augeas to just update that one configuration parameter that is required. The class in question is cis::linuxcontrols::c0003

Also, the current implementation sets the ownership and permissions of yum.conf. While that's a good idea, that isn't in the CIS benchmarks and probably shouldn't be included in the Puppet CIS module.

I'll submit a pull request that uses Augeas to update this setting.