[Bastille-linux-discuss] Changes in ConfigureForDistro and GLOBAL_*
This tool locks down Linux and UNIX systems.
Brought to you by:
jay
|
From: Easterling, T. <tyl...@hp...> - 2004-10-07 14:37:15
|
Hi All, I've changed the way that GLOBAL_DIR, GLOBAL_FILE, GLOBAL_BIN, ... are stored. I moved all of the "data", i.e. the file path information, to separate files based on OS Type, currently LINUX, OSX, and HP-UX. This new data format reduces the size of the API, pretty significantly, and should make it easier to port to new distributions. The data files are located in a new CVS directory named OSMap. There are three types of OSMap files: .bastille which contains BDIR and BFILE information .system which contains DIR, BIN, and FILE information .service which contains service definitions for=20 internal testing infrastructure, currently=20 only used on HP-UX systems For the .bastille and .system files the format is as follows: (bdir|bfile|bin|file|dir),file_id,'/file/path',[distro list] For example: bin,accton,'/usr/sbin/accton' The lack of distro information acts as a wildcard matching all distros for the OSType. So if for RH6.2 accton is in a different location, you would provide that location below the general definition, and on RH6.2 the general definition would be overwritten by with the more specific data. e.g. bin,accton,'/usr/sbin/accton' bin,accton,'/usr/sbin/accton',RH6.2 The list of distro can be of arbitrary length and the distro information can be more or less specific. For example, we know the initd directory for the SuSe and Debian releases is in a different location than all other distros. Instead of listing each distro with specific version information, you can shorten the matching pattern to SE and DB respectively and avoid enumerating all Debian and SuSe distributions. For example: dir,initd,'/etc/rc.d/init.d' dir,initd,'/etc/init.d',DB,SE Hope this is all clear, let me know if you are having a hard time with the new infrastructure. Tyler |