Change-Id: I3338950ed3726a750149d849d33813b0eeed50c0

The following parameters defined in /etc/login.defs can
be overridden per-user:

* PASS_MAX_DAYS
* PASS_MIN_DAYS
* PASS_WARN_DAYS
* INACTIVE

Related-Prod: PROD-18386

Change-Id: I5b182128f9dd8a043b48fb86e61febb2fd5c7e0a

* Ubuntu pinning params allow to be used
     multiply times. In same time, old `list`
     format now allowing to be predictable
     iterated inside jinja

Related-Bug: PROD-21604 (PROD:21604)

Change-Id: If1c0f0f834a296b9a19d0af5fc7673c9229a7ac5

Fixes: PROD-23149 (PROD:23149)

Change-Id: I14c68a0a519a63951571f966fae72fd01ec2e556

* CIS 5.4.4 Ensure default user umask is 027 or more restrictive (Scored)
* CIS 5.4.5 Ensure default user shell timeout is 900 seconds or less (Scored)

Related-Prod: PROD-20765

Change-Id: I5ff5e5bc76e1d87432caec70f2b35eec288e9213

Related-Prod: PROD-21969

Change-Id: I1c30189ee85605a5c68861d98f00bf5ac5e772c2

Related-Prod: PROD-22546
Related-Prod: PROD-22664

Change-Id: I66a35ef3d2436541ef70f02e2631fa8d4d86e5e9

Support full set of options defined in

  man modprobe.d

Change-Id: I3d30b6bc261ef308ae6afd963f13fda1e4b22c0d

* Update run_tests.sh to the latest revision
  * drop odd .kitchen.vagrant.yml

Related-Bug: PROD-20730 (PROD:20730)

Change-Id: I367800a60ad17020700a76670d1216dfdfcfe692

* Add TODO-proper fix for state - native salt fun.
   But due bug[1] in saltstack - we can't enable
   proper solution now

[1] 74599bbdfc

Related-PROD: PROD-20730

Change-Id: I11b6d81ae0f9a7864518f638e8fc423e4e087285

* Fix processing disabled repo
   * Extend tests for such case

Change-Id: Ib3243f2b3e70aecef65273be215b30613b8df025
Closes-Bug: PROD-21954 (PROD:21954)

Fixes: PROD-21350

Change-Id: If5a4473296e4d2cb6a80cb7397ac38a66011f39d

Change-Id: I32c83d63e7f359704ab6cc77dec07a1617880fbb
Prod-Related: PROD-20137

Change-Id: I5b146c466d9ee4110fd54e0421e944524641e9f6

The 'system.kernel.elevator' and 'system.kernel.isolcpu' options
have been kept for backward compatibility and should be used in new
fashion way with system.kernel.boot_options parameter.

Change-Id: I51f7167b8b8946500df2065ee6b02bcf21809bc9

Change-Id: If96f95fdab13eae187a843f81b0d0060339a5f98

PROD-16845

Change-Id: Iabc6f4584e34c988e67ff42ee8ceb20c469823d6

Change-Id: Ida91f545cc705457d1bc567fbee483e14a202a3a

Change-Id: I59297736406469e5314236cb40851d9a6f94386e

Change-Id: I29cfe2cd9dd39b74a1d39313f78dfddc87cb79b8

Change-Id: I71c2dd4b1970b39427beda6465b7a4726b12897b

Change-Id: I2163dbdee38e1b9c5c4dec6611550f16fdf1373b

Change-Id: I9767e07ffe3a808ee9a2de925862ba193b7b612e

Change-Id: I193af8b11146dd06413f199e456c47da554aaae5

To configure:

 * set system.netconsole.enabled to true
 * create system.netconsole.target dict
 * set a record with IP address and MAC and interface as subdict

It works with both static and DHCP interfaces, and applies online.
You could use bash-scripting in netconsole.conf.
You could override the MAC.

See tests/pillar/system.sls for further information.

Change-Id: I1cbde47575eb5d32a34cd6d79a063f42dbea7643

- enable topics on test pillar
- add integration test for sudo enabled groups
- use loop devices only for storage suite
- example inspec test for sudo state

- apply review comments
- add visudo check cmd

Separate cpu for host os from workload.

Change-Id: I5b274a6324fe2fa47c09df82c01e3b95dadb5e53
Epic: PROD-8959

Grub hugepages configuration and mount point action.

Change-Id: I49b26871c325b95a7d3f264892a9e997b58765bc
Epic: PROD-8959