").append(c.replace(bN,"")).find(g):c)),d&&i.each(d,[c,b,a])}});return this},serialize:function(){return f.param(this.serializeArray())},serializeArray:function(){return this.map(function(){return this.elements?f.makeArray(this.elements):this}).filter(function(){return this.name&&!this.disabled&&(this.checked||bO.test(this.nodeName)||bI.test(this.type))}).map(function(a,b){var c=f(this).val();return c==null?null:f.isArray(c)?f.map(c,function(a,c){return{name:b.name,value:a.replace(bF,"\r\n")}}):{name:b.name,value:c.replace(bF,"\r\n")}}).get()}}),f.each("ajaxStart ajaxStop ajaxComplete ajaxError ajaxSuccess ajaxSend".split(" "),function(a,b){f.fn[b]=function(a){return this.on(b,a)}}),f.each(["get","post"],function(a,c){f[c]=function(a,d,e,g){f.isFunction(d)&&(g=g||e,e=d,d=b);return f.ajax({type:c,url:a,data:d,success:e,dataType:g})}}),f.extend({getScript:function(a,c){return f.get(a,b,c,"script")},getJSON:function(a,b,c){return f.get(a,b,c,"json")},ajaxSetup:function(a,b){b?b_(a,f.ajaxSettings):(b=a,a=f.ajaxSettings),b_(a,b);return a},ajaxSettings:{url:bV,isLocal:bJ.test(bW[1]),global:!0,type:"GET",contentType:"application/x-www-form-urlencoded",processData:!0,async:!0,accepts:{xml:"application/xml, text/xml",html:"text/html",text:"text/plain",json:"application/json, text/javascript","*":bX},contents:{xml:/xml/,html:/html/,json:/json/},responseFields:{xml:"responseXML",text:"responseText"},converters:{"* text":a.String,"text html":!0,"text json":f.parseJSON,"text xml":f.parseXML},flatOptions:{context:!0,url:!0}},ajaxPrefilter:bZ(bT),ajaxTransport:bZ(bU),ajax:function(a,c){function w(a,c,l,m){if(s!==2){s=2,q&&clearTimeout(q),p=b,n=m||"",v.readyState=a>0?4:0;var o,r,u,w=c,x=l?cb(d,v,l):b,y,z;if(a>=200&&a<300||a===304){if(d.ifModified){if(y=v.getResponseHeader("Last-Modified"))f.lastModified[k]=y;if(z=v.getResponseHeader("Etag"))f.etag[k]=z}if(a===304)w="notmodified",o=!0;else try{r=cc(d,x),w="success",o=!0}catch(A){w="parsererror",u=A}}else{u=w;if(!w||a)w="error",a<0&&(a=0)}v.status=a,v.statusText=""+(c||w),o?h.resolveWith(e,[r,w,v]):h.rejectWith(e,[v,w,u]),v.statusCode(j),j=b,t&&g.trigger("ajax"+(o?"Success":"Error"),[v,d,o?r:u]),i.fireWith(e,[v,w]),t&&(g.trigger("ajaxComplete",[v,d]),--f.active||f.event.trigger("ajaxStop"))}}typeof a=="object"&&(c=a,a=b),c=c||{};var d=f.ajaxSetup({},c),e=d.context||d,g=e!==d&&(e.nodeType||e instanceof f)?f(e):f.event,h=f.Deferred(),i=f.Callbacks("once memory"),j=d.statusCode||{},k,l={},m={},n,o,p,q,r,s=0,t,u,v={readyState:0,setRequestHeader:function(a,b){if(!s){var c=a.toLowerCase();a=m[c]=m[c]||a,l[a]=b}return this},getAllResponseHeaders:function(){return s===2?n:null},getResponseHeader:function(a){var c;if(s===2){if(!o){o={};while(c=bH.exec(n))o[c[1].toLowerCase()]=c[2]}c=o[a.toLowerCase()]}return c===b?null:c},overrideMimeType:function(a){s||(d.mimeType=a);return this},abort:function(a){a=a||"abort",p&&p.abort(a),w(0,a);return this}};h.promise(v),v.success=v.done,v.error=v.fail,v.complete=i.add,v.statusCode=function(a){if(a){var b;if(s<2)for(b in a)j[b]=[j[b],a[b]];else b=a[v.status],v.then(b,b)}return this},d.url=((a||d.url)+"").replace(bG,"").replace(bL,bW[1]+"//"),d.dataTypes=f.trim(d.dataType||"*").toLowerCase().split(bP),d.crossDomain==null&&(r=bR.exec(d.url.toLowerCase()),d.crossDomain=!(!r||r[1]==bW[1]&&r[2]==bW[2]&&(r[3]||(r[1]==="http:"?80:443))==(bW[3]||(bW[1]==="http:"?80:443)))),d.data&&d.processData&&typeof d.data!="string"&&(d.data=f.param(d.data,d.traditional)),b$(bT,d,c,v);if(s===2)return!1;t=d.global,d.type=d.type.toUpperCase(),d.hasContent=!bK.test(d.type),t&&f.active++===0&&f.event.trigger("ajaxStart");if(!d.hasContent){d.data&&(d.url+=(bM.test(d.url)?"&":"?")+d.data,delete d.data),k=d.url;if(d.cache===!1){var x=f.now(),y=d.url.replace(bQ,"$1_="+x);d.url=y+(y===d.url?(bM.test(d.url)?"&":"?")+"_="+x:"")}}(d.data&&d.hasContent&&d.contentType!==!1||c.contentType)&&v.setRequestHeader("Content-Type",d.contentType),d.ifModified&&(k=k||d.url,f.lastModified[k]&&v.setRequestHeader("If-Modified-Since",f.lastModified[k]),f.etag[k]&&v.setRequestHeader("If-None-Match",f.etag[k])),v.setRequestHeader("Accept",d.dataTypes[0]&&d.accepts[d.dataTypes[0]]?d.accepts[d.dataTypes[0]]+(d.dataTypes[0]!=="*"?", "+bX+"; q=0.01":""):d.accepts["*"]);for(u in d.headers)v.setRequestHeader(u,d.headers[u]);if(d.beforeSend&&(d.beforeSend.call(e,v,d)===!1||s===2)){v.abort();return!1}for(u in{success:1,error:1,complete:1})v[u](d[u]);p=b$(bU,d,c,v);if(!p)w(-1,"No Transport");else{v.readyState=1,t&&g.trigger("ajaxSend",[v,d]),d.async&&d.timeout>0&&(q=setTimeout(function(){v.abort("timeout")},d.timeout));try{s=1,p.send(l,w)}catch(z){if(s<2)w(-1,z);else throw z}}return v},param:function(a,c){var d=[],e=function(a,b){b=f.isFunction(b)?b():b,d[d.length]=encodeURIComponent(a)+"="+encodeURIComponent(b)};c===b&&(c=f.ajaxSettings.traditional);if(f.isArray(a)||a.jquery&&!f.isPlainObject(a))f.each(a,function(){e(this.name,this.value)});else for(var g in a)ca(g,a[g],c,e);return d.join("&").replace(bD,"+")}}),f.extend({active:0,lastModified:{},etag:{}});var cd=f.now(),ce=/(\=)\?(&|$)|\?\?/i;f.ajaxSetup({jsonp:"callback",jsonpCallback:function(){return f.expando+"_"+cd++}}),f.ajaxPrefilter("json jsonp",function(b,c,d){var e=b.contentType==="application/x-www-form-urlencoded"&&typeof b.data=="string";if(b.dataTypes[0]==="jsonp"||b.jsonp!==!1&&(ce.test(b.url)||e&&ce.test(b.data))){var g,h=b.jsonpCallback=f.isFunction(b.jsonpCallback)?b.jsonpCallback():b.jsonpCallback,i=a[h],j=b.url,k=b.data,l="$1"+h+"$2";b.jsonp!==!1&&(j=j.replace(ce,l),b.url===j&&(e&&(k=k.replace(ce,l)),b.data===k&&(j+=(/\?/.test(j)?"&":"?")+b.jsonp+"="+h))),b.url=j,b.data=k,a[h]=function(a){g=[a]},d.always(function(){a[h]=i,g&&f.isFunction(i)&&a[h](g[0])}),b.converters["script json"]=function(){g||f.error(h+" was not called");return g[0]},b.dataTypes[0]="json";return"script"}}),f.ajaxSetup({accepts:{script:"text/javascript, application/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/javascript|ecmascript/},converters:{"text script":function(a){f.globalEval(a);return a}}}),f.ajaxPrefilter("script",function(a){a.cache===b&&(a.cache=!1),a.crossDomain&&(a.type="GET",a.global=!1)}),f.ajaxTransport("script",function(a){if(a.crossDomain){var d,e=c.head||c.getElementsByTagName("head")[0]||c.documentElement;return{send:function(f,g){d=c.createElement("script"),d.async="async",a.scriptCharset&&(d.charset=a.scriptCharset),d.src=a.url,d.onload=d.onreadystatechange=function(a,c){if(c||!d.readyState||/loaded|complete/.test(d.readyState))d.onload=d.onreadystatechange=null,e&&d.parentNode&&e.removeChild(d),d=b,c||g(200,"success")},e.insertBefore(d,e.firstChild)},abort:function(){d&&d.onload(0,1)}}}});var cf=a.ActiveXObject?function(){for(var a in ch)ch[a](0,1)}:!1,cg=0,ch;f.ajaxSettings.xhr=a.ActiveXObject?function(){return!this.isLocal&&ci()||cj()}:ci,function(a){f.extend(f.support,{ajax:!!a,cors:!!a&&"withCredentials"in a})}(f.ajaxSettings.xhr()),f.support.ajax&&f.ajaxTransport(function(c){if(!c.crossDomain||f.support.cors){var d;return{send:function(e,g){var h=c.xhr(),i,j;c.username?h.open(c.type,c.url,c.async,c.username,c.password):h.open(c.type,c.url,c.async);if(c.xhrFields)for(j in c.xhrFields)h[j]=c.xhrFields[j];c.mimeType&&h.overrideMimeType&&h.overrideMimeType(c.mimeType),!c.crossDomain&&!e["X-Requested-With"]&&(e["X-Requested-With"]="XMLHttpRequest");try{for(j in e)h.setRequestHeader(j,e[j])}catch(k){}h.send(c.hasContent&&c.data||null),d=function(a,e){var j,k,l,m,n;try{if(d&&(e||h.readyState===4)){d=b,i&&(h.onreadystatechange=f.noop,cf&&delete ch[i]);if(e)h.readyState!==4&&h.abort();else{j=h.status,l=h.getAllResponseHeaders(),m={},n=h.responseXML,n&&n.documentElement&&(m.xml=n),m.text=h.responseText;try{k=h.statusText}catch(o){k=""}!j&&c.isLocal&&!c.crossDomain?j=m.text?200:404:j===1223&&(j=204)}}}catch(p){e||g(-1,p)}m&&g(j,k,m,l)},!c.async||h.readyState===4?d():(i=++cg,cf&&(ch||(ch={},f(a).unload(cf)),ch[i]=d),h.onreadystatechange=d)},abort:function(){d&&d(0,1)}}}});var ck={},cl,cm,cn=/^(?:toggle|show|hide)$/,co=/^([+\-]=)?([\d+.\-]+)([a-z%]*)$/i,cp,cq=[["height","marginTop","marginBottom","paddingTop","paddingBottom"],["width","marginLeft","marginRight","paddingLeft","paddingRight"],["opacity"]],cr;f.fn.extend({show:function(a,b,c){var d,e;if(a||a===0)return this.animate(cu("show",3),a,b,c);for(var g=0,h=this.length;g
=i.duration+this.startTime){this.now=this.end,this.pos=this.state=1,this.update(),i.animatedProperties[this.prop]=!0;for(b in i.animatedProperties)i.animatedProperties[b]!==!0&&(g=!1);if(g){i.overflow!=null&&!f.support.shrinkWrapBlocks&&f.each(["","X","Y"],function(a,b){h.style["overflow"+b]=i.overflow[a]}),i.hide&&f(h).hide();if(i.hide||i.show)for(b in i.animatedProperties)f.style(h,b,i.orig[b]),f.removeData(h,"fxshow"+b,!0),f.removeData(h,"toggle"+b,!0);d=i.complete,d&&(i.complete=!1,d.call(h))}return!1}i.duration==Infinity?this.now=e:(c=e-this.startTime,this.state=c/i.duration,this.pos=f.easing[i.animatedProperties[this.prop]](this.state,c,0,1,i.duration),this.now=this.start+(this.end-this.start)*this.pos),this.update();return!0}},f.extend(f.fx,{tick:function(){var a,b=f.timers,c=0;for(;c-1,k={},l={},m,n;j?(l=e.position(),m=l.top,n=l.left):(m=parseFloat(h)||0,n=parseFloat(i)||0),f.isFunction(b)&&(b=b.call(a,c,g)),b.top!=null&&(k.top=b.top-g.top+m),b.left!=null&&(k.left=b.left-g.left+n),"using"in b?b.using.call(a,k):e.css(k)}},f.fn.extend({position:function(){if(!this[0])return null;var a=this[0],b=this.offsetParent(),c=this.offset(),d=cx.test(b[0].nodeName)?{top:0,left:0}:b.offset();c.top-=parseFloat(f.css(a,"marginTop"))||0,c.left-=parseFloat(f.css(a,"marginLeft"))||0,d.top+=parseFloat(f.css(b[0],"borderTopWidth"))||0,d.left+=parseFloat(f.css(b[0],"borderLeftWidth"))||0;return{top:c.top-d.top,left:c.left-d.left}},offsetParent:function(){return this.map(function(){var a=this.offsetParent||c.body;while(a&&!cx.test(a.nodeName)&&f.css(a,"position")==="static")a=a.offsetParent;return a})}}),f.each(["Left","Top"],function(a,c){var d="scroll"+c;f.fn[d]=function(c){var e,g;if(c===b){e=this[0];if(!e)return null;g=cy(e);return g?"pageXOffset"in g?g[a?"pageYOffset":"pageXOffset"]:f.support.boxModel&&g.document.documentElement[d]||g.document.body[d]:e[d]}return this.each(function(){g=cy(this),g?g.scrollTo(a?f(g).scrollLeft():c,a?c:f(g).scrollTop()):this[d]=c})}}),f.each(["Height","Width"],function(a,c){var d=c.toLowerCase();f.fn["inner"+c]=function(){var a=this[0];return a?a.style?parseFloat(f.css(a,d,"padding")):this[d]():null},f.fn["outer"+c]=function(a){var b=this[0];return b?b.style?parseFloat(f.css(b,d,a?"margin":"border")):this[d]():null},f.fn[d]=function(a){var e=this[0];if(!e)return a==null?null:this;if(f.isFunction(a))return this.each(function(b){var c=f(this);c[d](a.call(this,b,c[d]()))});if(f.isWindow(e)){var g=e.document.documentElement["client"+c],h=e.document.body;return e.document.compatMode==="CSS1Compat"&&g||h&&h["client"+c]||g}if(e.nodeType===9)return Math.max(e.documentElement["client"+c],e.body["scroll"+c],e.documentElement["scroll"+c],e.body["offset"+c],e.documentElement["offset"+c]);if(a===b){var i=f.css(e,d),j=parseFloat(i);return f.isNumeric(j)?j:i}return this.css(d,typeof a=="string"?a:a+"px")}}),a.jQuery=a.$=f,typeof define=="function"&&define.amd&&define.amd.jQuery&&define("jquery",[],function(){return f})})(window);
\ No newline at end of file
diff --git a/doc/puppet_class_list.html b/doc/puppet_class_list.html
new file mode 100644
index 0000000..5557e96
--- /dev/null
+++ b/doc/puppet_class_list.html
@@ -0,0 +1,106 @@
+
+
+
+ Puppet Class List
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Puppet Class: confdroid_ssh
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: confdroid_ssh
+
+
+
+
+ Defined in:
+
+ manifests/init.pp
+
+
+
+
+
Summary
+ Class initializes the confdroid_ssh module
+
+
Overview
+
+
+
+
confdroid_ssh::init.pp Module name: confdroid_ssh Author: 12ww1160 (12ww1160@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+
+
+ # File 'manifests/init.pp', line 6
+
+class confdroid_ssh {
+ include confdroid_ssh::params
+}
+
+
+
+
+
+
+
+
+ Puppet Class: confdroid_ssh::firewall::iptables
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: confdroid_ssh::firewall::iptables
+
+
+
Summary
+ Class manages firewall rules for SSH
+
+
Overview
+
+
+
+
confdroid_ssh::firewall::iptables.pp Module name: confdroid_ssh Author: 12ww1160 (12ww1160@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+9
+10
+11
+12
+13
+14
+15
+16
+
+
+ # File 'manifests/firewall/iptables.pp', line 6
+
+class confdroid_ssh::firewall::iptables (
+
+) inherits confdroid_ssh::params {
+ firewall { "${ssh_fw_order}${ssh_fw_port} allow SSH on port ${ssh_fw_port}":
+ ensure => $ssh_fw_rule,
+ proto => 'tcp',
+ source => $ssh_source_range,
+ dport => $ssh_fw_port,
+ jump => 'accept',
+ }
+}
+
+
+
+
+
+
+
+
+ Puppet Class: confdroid_ssh::main::config
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: confdroid_ssh::main::config
+
+
+
Summary
+ Class manages module logic
+
+
Overview
+
+
+
+
confdroid_ssh::main::config.pp Module name: confdroid_ssh Author: 12ww1160 (12ww1160@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+9
+10
+
+
+ # File 'manifests/main/config.pp', line 6
+
+class confdroid_ssh::main::config (
+) inherits confdroid_ssh::params {
+ require confdroid_selinux
+ include confdroid_ssh::main::service
+}
+
+
+
+
+
+
+
+
+ Puppet Class: confdroid_ssh::main::dirs
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: confdroid_ssh::main::dirs
+
+
+
Summary
+ Class manages directories
+
+
Overview
+
+
+
+
confdroid_ssh::main::dirs.pp Module name: confdroid_ssh Author: 12ww1160 (12ww1160@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+9
+10
+11
+12
+13
+14
+15
+16
+17
+18
+19
+20
+21
+22
+23
+24
+25
+26
+27
+28
+29
+30
+31
+32
+
+
+ # File 'manifests/main/dirs.pp', line 6
+
+class confdroid_ssh::main::dirs (
+) inherits confdroid_ssh::params {
+ require confdroid_ssh::main::install
+
+ file { $ssh_etc_path:
+ ensure => directory,
+ path => $ssh_etc_path,
+ owner => $sshd_user,
+ group => $sshd_user,
+ mode => '0700',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ }
+
+ file { $sshd_custom_path:
+ ensure => directory,
+ owner => $sshd_user,
+ group => $sshd_user,
+ mode => '0700',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ }
+}
+
+
+
+
+
+
+
+
+ Puppet Class: confdroid_ssh::main::files
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: confdroid_ssh::main::files
+
+
+
Summary
+ Class manages files
+
+
Overview
+
+
+
+
confdroid_ssh::main::files.pp Module name: confdroid_ssh Author: 12ww1160 (12ww1160@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+9
+10
+11
+12
+13
+14
+15
+16
+17
+18
+19
+20
+21
+22
+23
+24
+25
+26
+27
+28
+29
+30
+31
+32
+33
+34
+35
+36
+37
+38
+39
+40
+41
+42
+43
+44
+45
+46
+
+
+ # File 'manifests/main/files.pp', line 6
+
+class confdroid_ssh::main::files (
+) inherits confdroid_ssh::params {
+ require confdroid_ssh::main::dirs
+
+ file { $sshd_config_path:
+ ensure => file,
+ path => $sshd_config_path,
+ owner => $sshd_user,
+ group => $sshd_user,
+ mode => '0640',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ content => template($sshd_config_erb),
+ notify => Service[$sshd_service],
+ }
+
+ if $ssh_manage_config {
+ file { $sshd_custom_conf:
+ ensure => file,
+ path => $sshd_custom_conf,
+ owner => $sshd_user,
+ group => $sshd_user,
+ mode => '0640',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ content => template($sshd_custom_erb),
+ notify => Service[$sshd_service],
+ }
+ # we want the default root login setting to be managed by the custom conf,
+ # so we remove the default file if it exists
+ file { $sshd_root_login_file:
+ ensure => absent,
+ path => $sshd_root_login_file,
+ notify => Service[$sshd_service],
+ }
+ }
+}
+
+
+
+
+
+
+
+
+ Puppet Class: confdroid_ssh::main::install
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: confdroid_ssh::main::install
+
+
+
Summary
+ Class manages installation
+
+
Overview
+
+
+
+
confdroid_ssh::main::install.pp Module name: confdroid_ssh Author: 12ww1160 (12ww1160@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+9
+10
+11
+
+
+ # File 'manifests/main/install.pp', line 6
+
+class confdroid_ssh::main::install (
+) inherits confdroid_ssh::params {
+ package { $ssh_reqpackages:
+ ensure => $pkg_ensure,
+ }
+}
+
+
+
+
+
+
+
+
+ Puppet Class: confdroid_ssh::main::service
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: confdroid_ssh::main::service
+
+
+
Summary
+ Class manages service settings
+
+
Overview
+
+
+
+
confdroid_ssh::main::service.pp Module name: confdroid_ssh Author: 12ww1160 (12ww1160@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+9
+10
+11
+12
+13
+14
+15
+16
+17
+18
+
+
+ # File 'manifests/main/service.pp', line 6
+
+class confdroid_ssh::main::service (
+) inherits confdroid_ssh::params {
+ require confdroid_ssh::main::files
+ require confdroid_ssh::selinux::semanage
+ require confdroid_ssh::firewall::iptables
+
+ service { $sshd_service:
+ ensure => running,
+ hasstatus => true,
+ hasrestart => true,
+ enable => true,
+ }
+}
+
+
+
+
+
+
+
+
+ Puppet Class: confdroid_ssh::params
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: confdroid_ssh::params
+
+
+
Summary
+ Class contains all class parameters for confdroid_ssh
+
+
Overview
+
+
+
+
confdroid_ssh::params.pp Module name: confdroid_ssh Author: 12ww1160 (12ww1160@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+194
+195
+196
+197
+198
+199
+200
+201
+202
+203
+204
+205
+206
+207
+208
+209
+210
+211
+212
+213
+214
+215
+216
+217
+218
+219
+220
+221
+222
+223
+224
+225
+226
+227
+228
+229
+230
+231
+232
+233
+234
+235
+236
+237
+238
+239
+240
+241
+242
+243
+244
+245
+246
+247
+248
+249
+250
+251
+252
+253
+254
+255
+256
+257
+258
+259
+260
+261
+262
+263
+264
+265
+266
+267
+268
+269
+270
+271
+272
+273
+274
+275
+276
+277
+278
+279
+280
+
+
+ # File 'manifests/params.pp', line 194
+
+class confdroid_ssh::params (
+
+ Array $ssh_reqpackages = ['openssh','openssh-clients','openssh-server'],
+ String $pkg_ensure = 'present',
+
+ # firewall settings
+ String $ssh_fw_rule = 'present',
+ String $ssh_fw_port = '22',
+ String $ssh_fw_order = '50',
+ String $ssh_source_range = '0.0.0.0/0',
+
+ # sshd configuration
+ Boolean $ssh_manage_config = true,
+ String $ssh_address_family = 'any',
+ String $ssh_listen_address = '0.0.0.0',
+ String $ssh_root_login = 'prohibit-password',
+ String $ssh_strict_modes = 'yes',
+ String $ssh_max_auth_tries = '6',
+ String $ssh_max_sessions = '10',
+ String $ssh_pubkey_auth = 'yes',
+ String $ssh_auth_key_files = '.ssh/authorized_keys',
+ String $ssh_authorized_principals_file = 'none',
+ String $ssh_authorized_keys_command = 'none',
+ String $ssh_authorized_keys_command_user = 'nobody',
+ Boolean $ssh_use_specific_hostkey = false,
+ String $ssh_hostkey_type = 'rsa',
+ String $ssh_rekeylimit = 'default none',
+ String $ssh_syslog_facility = 'AUTH',
+ String $ssh_log_level = 'INFO',
+ String $ssh_password_authentication = 'no',
+ String $ssh_permit_empty_passwords = 'no',
+ String $ssh_kbd_interactive_auth = 'no',
+ Boolean $ssh_use_kerberos = false,
+ String $ssh_kerberos_authentication = 'yes',
+ String $ssh_kerberos_or_local_passwd = 'yes',
+ String $ssh_kerberos_ticket_cleanup = 'yes',
+ String $ssh_kerberos_get_afstoken = 'no',
+ String $ssh_kerberos_use_kuserok = 'yes',
+ Boolean $ssh_use_gssapi = false,
+ String $ssh_gssapi_authentication = 'yes',
+ String $ssh_gssapi_cleanup_credentials = 'yes',
+ String $ssh_gssapi_key_exchange = 'no',
+ String $ssh_gssapi_enablek5users = 'no',
+ String $ssh_use_pam = 'no',
+ String $ssh_allow_agent_forwarding = 'yes',
+ String $ssh_allow_tcp_forwarding = 'yes',
+ String $ssh_gateway_ports = 'no',
+ String $ssh_x11_forwarding = 'no',
+ String $ssh_x11_display_offset = '10',
+ String $ssh_x11_use_localhost = 'yes',
+ String $ssh_permit_tty = 'yes',
+ String $ssh_print_motd = 'yes',
+ String $ssh_print_lastlog = 'yes',
+ String $ssh_tcp_keepalive = 'yes',
+ String $ssh_permit_user_environment = 'no',
+ String $ssh_compression = 'delayed',
+ String $ssh_client_alive_interval = '0',
+ String $ssh_client_alive_count_max = '3',
+ String $ssh_use_dns = 'no',
+ String $ssh_pid_file = '/var/run/sshd.pid',
+ String $ssh_max_startups = '10:30:100',
+ String $ssh_permit_tunnel = 'no',
+ String $ssh_chroot_directory = 'none',
+ String $ssh_version_addendum = 'none',
+ String $ssh_banner = 'none',
+
+) {
+# default facts
+ $fqdn = $facts['networking']['fqdn']
+ $hostname = $facts['networking']['hostname']
+ $domain = $facts['networking']['domain']
+ $os_name = $facts['os']['name']
+ $os_release = $facts['os']['release']['major']
+
+ $sshd_user = 'root'
+ $ssh_etc_path = '/etc/ssh'
+ $sshd_service = 'sshd'
+ $sshd_config_path = "${ssh_etc_path}/sshd_config"
+ $sshd_custom_path = "${ssh_etc_path}/sshd_config.d"
+ $sshd_custom_conf = "${sshd_custom_path}/10-custom.conf"
+ $sshd_custom_erb = 'confdroid_ssh/sshd_custom_conf.erb'
+ $sshd_config_erb = 'confdroid_ssh/sshd_config.erb'
+ $sshd_root_login_file = "${sshd_custom_path}/01-permitrootlogin.conf"
+
+ # includes must be last
+ include confdroid_ssh::main::config
+}
+
+
+
+
+
+
+
+
+ Puppet Class: confdroid_ssh::selinux::semanage
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: confdroid_ssh::selinux::semanage
+
+
+
Summary
+ Class manages SELinux semanage settings
+
+
Overview
+
+
+
+
confdroid_ssh::selinux::semanage.pp Module name: confdroid_ssh Author: 12ww1160 (12ww1160@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+9
+10
+11
+12
+13
+
+
+ # File 'manifests/selinux/semanage.pp', line 6
+
+class confdroid_ssh::selinux::semanage (
+) inherits confdroid_ssh::params {
+ exec { 'semanage_port_ssh':
+ command => "semanage port -a -t ssh_port_t -p tcp ${ssh_fw_port}",
+ unless => "semanage port -l | grep '^ssh_port_t' | grep 'tcp' | grep '${ssh_fw_port}'",
+ path => ['/usr/bin', '/usr/sbin'],
+ }
+}
+
+
+
+
+
+
+
+
+ Top Level Namespace
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Top Level Namespace
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+