{
"name": "os_hardening",
  "description": "hardening role applied to linux nodes",
  "run_list": [
    "recipe[irrigate-orchard_base::os-hardening]",
    "recipe[irrigate-orchard_base::sysctl_hardening]",
    "recipe[irrigate-orchard_base::sshd]",
    "recipe[irrigate-orchard_base::bootloader_permissions]",
    "recipe[irrigate-orchard_base::system_files_permissions]",
    "recipe[irrigate-orchard_base::auditd_logging]",
    "recipe[irrigate-orchard_base::services_hardening]",
    "recipe[irrigate-orchard_base::password_suite]",
    "recipe[irrigate-orchard_base::cron_security]",
    "recipe[irrigate-orchard_base::aide_update]"
  ]
}