Adoptable Cookbooks List

Looking for a cookbook to adopt? You can now see a list of cookbooks available for adoption!
List of Adoptable Cookbooks

Supermarket Belongs to the Community

Supermarket belongs to the community. While Chef has the responsibility to keep it running and be stewards of its functionality, what it does and how it works is driven by the community. The chef/supermarket repository will continue to be where development of the Supermarket application takes place. Come be part of shaping the direction of Supermarket by opening issues and pull requests or by joining us on the supermarket mailing list.

Select Badges

Select Supported Platforms


chef-client-hardening (1) Versions 1.0.0

Set correct owner/permissions for chef-client sensitive files

cookbook 'chef-client-hardening', '~> 1.0.0'
cookbook 'chef-client-hardening', '~> 1.0.0', :supermarket
knife cookbook site install chef-client-hardening
knife cookbook site download chef-client-hardening

chef-client-hardening Cookbook | Cookbook Version Build Status

Set correct owner/permissions for chef-client sensitive files



The following platforms and versions are tested and supported using Opscode's test-kitchen: - Ubuntu 12.04 - Ubuntu 14.04 - Debian 7 - Debian 8 - Centos 6 - Centos 7 - Fedora 21 - Fedora 22



Key Type Description
[chef-client-hardening][extra_dirs] Array Extra directories to restrict permissions (default: [])
[chef-client-hardening][extra_files] Array Extra files to restrict permissions (default: [])



This recipe will set owner & group to root for /etc/chef/ directory and /etc/chef/client.rb, /etc/chef/client.pem files. Additionally, it will look for [chef-client-hardening][extra_dirs] and [chef-client-hardening][extra_files] attributes to apply same permissions.

Directories permissions are set to 0700 and files to 0600.

  "run_list": [


You can use rake to invoke testing tasks (See Rakefile for details):

$ rake test:checkstyle

Will run foodcritic and rubocop.

$ rake test:chefspec

Will run unit tests with ChefSpec.

$ rake test:kitchen

Will test all kitchen instances declared in .kitchen.yml.

Docker driver is used for integration testing with test-kitchen. You will need to have docker installed to run integration testing, or adapt the existing .kitchen.yml for your driver.

$ kitchen list
$ kitchen test [instance]


  1. Fork the repository on Github
  2. Create a named feature branch (like add_component_x)
  3. Write your change
  4. Write tests for your change (if applicable)
  5. Run the tests, ensuring they all pass
  6. Submit a Pull Request using Github

License and Authors

Authors: Sliim

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Dependent cookbooks

This cookbook has no specified dependencies.

Contingent cookbooks

There are no cookbooks that are contingent upon this one.

chef-client-hardening CHANGELOG

This file is used to list changes made in each version of the chef-client-hardening cookbook.


  • Initial release of chef-client-hardening

Foodcritic Metric

1.0.0 passed this metric