9c12812735
Some major changes: * the charm has been rebased (from a Python perspective) to be rooted in the charm directory. This is a single root. * Imports have been changed so that the don't add lots of imports to the namespace of the module doing the import. * The code that used to run at module import time has been made lazy such that it only has to run if the relevant functions are called. This includes restart_on_change parameters, the harden function and the parameters to the guard_map. Appropriate changes will be submitted to charm-helpers. * Several tests had to be re-written as (incorrect) mocking meant that text fixtures didn't actually match what the code was doing. Thus, the tests were meaningless. * This has had a net positive impact on the unit tests wrt to importing modules and mocking. Change-Id: Id07d9d1caaa9b29453a63c2e49ba831071e9457f
44 lines
908 B
Plaintext
44 lines
908 B
Plaintext
# NOTE: this schema must contain all valid keys from it's associated defaults
|
|
# file. It is used to validate user-provided overrides.
|
|
general:
|
|
desktop_enable:
|
|
environment:
|
|
extra_user_paths:
|
|
umask:
|
|
root_path:
|
|
auth:
|
|
pw_max_age:
|
|
pw_min_age:
|
|
retries:
|
|
lockout_time:
|
|
timeout:
|
|
allow_homeless:
|
|
pam_passwdqc_enable:
|
|
pam_passwdqc_options:
|
|
root_ttys:
|
|
uid_min:
|
|
gid_min:
|
|
sys_uid_min:
|
|
sys_uid_max:
|
|
sys_gid_min:
|
|
sys_gid_max:
|
|
chfn_restrict:
|
|
security:
|
|
users_allow:
|
|
suid_sgid_enforce:
|
|
suid_sgid_blacklist:
|
|
suid_sgid_whitelist:
|
|
suid_sgid_dry_run_on_unknown:
|
|
suid_sgid_remove_from_unknown:
|
|
packages_clean:
|
|
packages_list:
|
|
kernel_enable_module_loading:
|
|
kernel_enable_core_dump:
|
|
ssh_tmout:
|
|
sysctl:
|
|
kernel_secure_sysrq:
|
|
kernel_enable_sysrq:
|
|
forwarding:
|
|
ipv6_enable:
|
|
arp_restricted:
|