Christoph Hartmann

This should be done via an enhancement for `cnspec bundle validate`. I would consider desc, audit, remediation etc as warning, not error

I propose you have a look at the [Hardening Framework](http://hardening.io/). It does the implementations for puppet, chef and ansible. The framework uses the same validation tests to ensure all implementations...

Amazing, let me know if you need anything.

It would also be interesting to cover a use-case reported by @aaronlippold: ``` control 'filepermission-mask-05.01' do impact 0.5 tag severity: 'medium' title 'System must Verify that Shared Library Files Have...

I agree with @aaronlippold That we should find a way to improve the test time.

Good overview about what should work out of the box: http://static.springsource.org/spring-security/site/docs/3.2.x/reference/ldap.html