Failed to generate additional resources

[0x9090]

Running OS_hardening module throws the following error,

Error: /Stage[main]/Os_hardening::Minimize_access/File[/usr/bin]: Failed to generate additional resources using 'eval_generate': Too many levels of symbolic links @ rb_file_s_stat - /usr/bin/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/X11/lzcat

OS_hardening is at version 1.1.2 on patched Debian Jessie. I'm instantiating the module with these parameters,

class spacex_os_hardening_rules {
  class { "os_hardening":
    system_environment        => "default",
    desktop_enabled           => false,
    enable_ipv4_forwarding    => false,
    enable_ipv6_forwarding    => false,
    enable_ipv6               => false,
    arp_restricted            => true,
    extra_user_paths          => [],
    umask                     => "027",
    password_max_age          => 182,
    password_min_age          => 7,
    auth_retries              => 5,
    auth_lockout_time         => 300,
    login_timeout             => 60,
    allow_login_without_home  => true,
    passwdqc_enabled          => false,
    # passwdqc_options          => "",
    allow_change_user         => true,
    enable_module_loading     => true,
    load_modules              => [],
    enable_sysrq              => false,
    enable_core_dump          => false,
    enable_stack_protection   => true,
    # cpu_vendor                => 'intel'
    root_ttys                 => ["console","tty1","tty2","tty3","tty4","tty5","tty6","ttyS0","ttyS1"],
    # whitelist                 => [],
    # blacklist                 => [],
    # remove_from_unknown       => false,
    # dry_run_on_unknown        => false,
  }
}

[0x9090]

This bug was due to a erroneous symlink, originally created by X11.

ls -alh /usr/bin | grep X11
lrwxrwxrwx  1 root   root       1 May  6  2013 X11 -> .

That X11 symlink points to it's own parent directory, and thus the OS Hardening module recurses on it. The issue was solved by having Puppet delete that file before applying the hardening module.

http://ubuntuforums.org/showthread.php?t=829402