aboutsummaryrefslogtreecommitdiff
path: root/manifests/sysctl.pp
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2010-01-02 11:58:29 -0200
committerSilvio Rhatto <rhatto@riseup.net>2010-01-02 11:58:29 -0200
commitd22788a7a2d611e8b8630717e8e2f79319a80a6d (patch)
tree195e4efe0c5826660f322d2cea5b88ce1a984700 /manifests/sysctl.pp
downloadpuppet-nodo-d22788a7a2d611e8b8630717e8e2f79319a80a6d.tar.gz
puppet-nodo-d22788a7a2d611e8b8630717e8e2f79319a80a6d.tar.bz2
Initial import
Diffstat (limited to 'manifests/sysctl.pp')
-rw-r--r--manifests/sysctl.pp16
1 files changed, 16 insertions, 0 deletions
diff --git a/manifests/sysctl.pp b/manifests/sysctl.pp
new file mode 100644
index 0000000..3bd028c
--- /dev/null
+++ b/manifests/sysctl.pp
@@ -0,0 +1,16 @@
+class sysctl {
+ # root exploit fix, see http://wiki.debian.org/mmap_min_addr
+ # TODO: remove in the future or use a sysctl puppet module
+ file { "/etc/sysctl.d/mmap_min_addr.conf":
+ owner => "root",
+ group => "root",
+ mode => 0644,
+ ensure => present,
+ content => "vm.mmap_min_addr = 4096\n",
+ }
+
+ exec { "/etc/init.d/procps restart":
+ subscribe => File["/etc/sysctl.d/mmap_min_addr.conf"],
+ refreshonly => true,
+ }
+}