Labs for checking and enforcing compliance controls with Puppet Bolt Important internal note - hydra targets must be built without applying CD4PE Baseline configuration in order for final CIS plan to work.

• fervid-secure_linux_cis: (https://forge.puppet.com/fervid/secure_linux_cis)
  • aboe/chrony (>= 0.3.0 < 1.0.0)
  • camptocamp/augeas (>= 1.8.0 < 2.0.0)
    • puppetlabs/augeas_core (>=1.0.0 <2.0.0)
  • camptocamp/kmod (>= 2.3.0 < 3.0.0)
    • puppetlabs/stdlib (>=4.13.1 < 7.0.0)
  • camptocamp/postfix (>= 1.8.0 < 2.0.0)
    • puppetlabs/stdlib (>=4.13.0 <7.0.0)
    • camptocamp/augeas (>=1.0.0 <2.0.0)
    • puppet/alternatives (>=2.0.0 <4.0.0)
    • puppetlabs/mailalias_core (>=1.0.5 <2.0.0)
  • herculesteam/augeasproviders_core (>= 2.5.0 < 3.0.0)
    • puppetlabs/stdlib (>= 3.2.0 < 7.0.0)
  • herculesteam/augeasproviders_grub (>= 3.0.0 < 4.0.0)
    • herculesteam/augeasproviders_core (>=2.4.0 < 3.0.0)
  • herculesteam/augeasproviders_sysctl (>= 2.3.0 < 3.0.0)
    • herculesteam/augeasproviders_core (>=2.4.0 <3.0.0)
  • herculesteam/augeasproviders_shellvar (>= 4.0.0 < 5.0.0)
    • herculesteam/augeasproviders_core (>=2.4.0 <3.0.0)
  • herculesteam/augeasproviders_pam (>= 2.2.0 < 3.0.0)
    • herculesteam/augeasproviders_core (>=2.4.0 <3.0.0)
  • kemra102/auditd (>= 2.2.0 < 3.0.0)
    • puppetlabs-stdlib (>= 4.6.0)
    • puppetlabs-concat (>= 1.1.0)
  • puppet/alternatives (>= 2.0.0 < 4.0.0)
  • puppet/cron (>= 1.3.0 < 2.0.0)
  • puppet/logrotate (>= 4.0.0 < 5.0.0)
    • puppetlabs/stdlib (>= 4.22.0 < 7.0.0)
  • puppetlabs/augeas_core (>= 1.0.0 < 2.0.0)
  • puppetlabs/firewall (>= 1.15.3 < 3.0.0)
    • puppetlabs/stdlib (>= 4.0.0 < 7.0.0)
  • puppetlabs/mailalias_core (>= 1.0.0 < 2.0.0)
  • puppetlabs/mount_core (>= 1.0.0 < 2.0.0)
  • puppetlabs/ntp (>= 8.0.0 < 9.0.0)
    • puppetlabs/stdlib (>= 4.0.0 < 7.0.0)
  • puppetlabs/reboot (>= 1.0.0 < 3.0.0)
  • puppetlabs/stdlib (>= 4.0.0 <= 7.0.0)
• puppetlabs-iis: (https://forge.puppet.com/puppetlabs/iis)
  • puppetlabs/pwshlib (>= 0.4.0 < 2.0.0)