2 files changed, 8 insertions, 15 deletions
diff --git a/manifests/faillog/disable.pp b/manifests/faillog/disable.pp
index c05e6bc..c55e39e 100644
--- a/manifests/faillog/disable.pp
+++ b/manifests/faillog/disable.pp
@@ -1,9 +1,6 @@
+# do not log any faillog
 class loginrecords::faillog::disable inherits loginrecords::faillog::enable{
-  Replace['loginrecords-faillog']{
-    pattern   => '^FAILLOG_ENAB[[:space:]]+yes$',
-    replacement => 'FAILLOG_ENAB		no',
-  }
-  Line['loginrecords-faillog']{
-    line  => 'FAILLOG_ENAB		no',
+  File_line['loginrecords-faillog']{
+    line  => "FAILLOG_ENAB\tno",
   }
 }
diff --git a/manifests/faillog/enable.pp b/manifests/faillog/enable.pp
index c714b74..6120193 100644
--- a/manifests/faillog/enable.pp
+++ b/manifests/faillog/enable.pp
@@ -1,14 +1,10 @@
+# manage faillog logging
 class loginrecords::faillog::enable(
   $login_defs_file = '/etc/login.defs'
 ) {
-  replace{'loginrecords-faillog':
-    file    => $login_defs_file,
-    pattern   => '^FAILLOG_ENAB[[:space]]+no$',
-    replacement => 'FAILLOG_ENAB		yes',
-  }
-  line{'loginrecords-faillog':
-    file  => $login_defs_file,
-    line  => 'FAILLOG_ENAB		yes',
-    require => Replace['loginrecords-faillog'],
+  file_line{'loginrecords-faillog':
+    path  => $loginrecords::faillog::enable::login_defs_file,
+    match => '^FAILLOG_ENAB',
+    line  => "FAILLOG_ENAB\tyes",
   }
 }