manifests/lastlog/disable.pp


1
2
3
4
5
6
7
8
9
10
11

# disable lastlog loggin of pam
class loginrecords::lastlog::disable inherits loginrecords::lastlog::enable {
  Replace['loginrecords-lastlog']{
    pattern     => '^session[[:space:]]+optional[[:space:]]+pam_lastlog.so$',
    replacement => '#session  optional   pam_lastlog.so',
  }
  File['/var/log/lastlog']{
    ensure => absent,
    backup => false,
  }
}