Feature: sap
Description
Configures Garden Linux for SAP workloads, including SAP-specific logging, certificates, and security audit rules.
What it does
Installs auditd, ca-certificates, acl, and python3-apt. Configures:
- SAP-specific audit rules for privilege escalation, privileged operations, and system integrity
- Garden Linux MOTD and issue banners
- The SAP Global Root CA certificate
- tmpfiles configuration for legacy paths
Files
Files present in this feature and their purpose. See the feature file reference for the semantics of each file type.
| File | Purpose |
|---|---|
exec.config (ref) | Enables auditd and applies SAP-specific system configuration. |
file.include.markers.yaml (ref) | Maps files to test-coverage marker IDs. |
file.include.stat (ref) | Sets ownership and permissions for SAP configuration files. |
info.yaml (ref) | Declares type: element and included/excluded features. |
pkg.include (ref) | Installs: auditd, ca-certificates, acl, python3-apt. |
file.include/etc/issue (file.include) | System identification text displayed before login on physical consoles. |
file.include/etc/issue.net (file.include) | System identification text displayed to remote SSH connections. |
file.include/etc/motd (file.include) | Message of the Day displayed after login. |
file.include/etc/audit/rules.d/70-privilege-escalation.rules (file.include) | Audit rules for tracking privilege escalation events. |
file.include/etc/audit/rules.d/70-privileged-special.rules (file.include) | Audit rules for privileged special operations (amd64). |
file.include/etc/audit/rules.d/70-privileged-special.rules.arm64 (file.include) | Audit rules for privileged special operations (arm64). |
file.include/etc/audit/rules.d/70-system-integrity.rules (file.include) | Audit rules for system integrity monitoring. |
file.include/etc/tmpfiles.d/legacy.conf (file.include) | Creates legacy directory paths needed by SAP applications. |
file.include/usr/local/share/ca-certificates/SAP_Global_Root_CA.crt (file.include) | SAP Global Root Certificate Authority certificate. |
Related features
This feature has no include or exclude relationships.