You want to prevent certain processes from running.
Tags: cfengine cfengine cookbook configuration management infosec
]]>You want to distribute public SSH keys.
Tags: cfengine cfengine cookbook ssh infosec
]]>It’s vicious cycle. Resources are spent auditing hosts. Many more are spent fixing all of the audit’s deficiencies. Then it’s back to business as usual. Time passes and hosts slowly degrade until the next audit. Repeat.
]]>