I am searching for something (be it a Framework, Software or even just a Best Practice) for the following requirement:
I want to provide a kind of blacklist of configuration values (in several configuration file formats) which must not be set/changed.
The system is a Linux(CentOS) appliance, which houses only one application, configuration changes should be rare.
I want to check several configuration files for sanity. Ranging from apache over ifcfg-eth* etc.
Is there a solution which already provides a mechanism like that for a set of 'standard' configuration files?
An Example: I want to prevent users from accidently deativating KeepAlive in Apache but they should be able to change other things in the configuration. I want to prevent 'common mistakes'.