diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2010-03-22 22:11:47 -0300 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2010-03-22 22:11:47 -0300 |
| commit | 1b44048f33e795162212d2fdc77bcf0d9cdf0533 (patch) | |
| tree | a854d2e5c1abbaba5eeff0d719df2a827c71a9ba /manifests/subsystems/sysctl.pp | |
| parent | 7433f4dfc9ea4056871ef273368e9826ccf38517 (diff) | |
| download | puppet-nodo-1b44048f33e795162212d2fdc77bcf0d9cdf0533.tar.gz puppet-nodo-1b44048f33e795162212d2fdc77bcf0d9cdf0533.tar.bz2 | |
Module organization
Diffstat (limited to 'manifests/subsystems/sysctl.pp')
| -rw-r--r-- | manifests/subsystems/sysctl.pp | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/manifests/subsystems/sysctl.pp b/manifests/subsystems/sysctl.pp new file mode 100644 index 0000000..3bd028c --- /dev/null +++ b/manifests/subsystems/sysctl.pp @@ -0,0 +1,16 @@ +class sysctl { + # root exploit fix, see http://wiki.debian.org/mmap_min_addr + # TODO: remove in the future or use a sysctl puppet module + file { "/etc/sysctl.d/mmap_min_addr.conf": + owner => "root", + group => "root", + mode => 0644, + ensure => present, + content => "vm.mmap_min_addr = 4096\n", + } + + exec { "/etc/init.d/procps restart": + subscribe => File["/etc/sysctl.d/mmap_min_addr.conf"], + refreshonly => true, + } +} |