diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2010-01-02 11:58:29 -0200 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2010-01-02 11:58:29 -0200 |
| commit | d22788a7a2d611e8b8630717e8e2f79319a80a6d (patch) | |
| tree | 195e4efe0c5826660f322d2cea5b88ce1a984700 /manifests/sysctl.pp | |
| download | puppet-nodo-d22788a7a2d611e8b8630717e8e2f79319a80a6d.tar.gz puppet-nodo-d22788a7a2d611e8b8630717e8e2f79319a80a6d.tar.bz2 | |
Initial import
Diffstat (limited to 'manifests/sysctl.pp')
| -rw-r--r-- | manifests/sysctl.pp | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/manifests/sysctl.pp b/manifests/sysctl.pp new file mode 100644 index 0000000..3bd028c --- /dev/null +++ b/manifests/sysctl.pp @@ -0,0 +1,16 @@ +class sysctl { + # root exploit fix, see http://wiki.debian.org/mmap_min_addr + # TODO: remove in the future or use a sysctl puppet module + file { "/etc/sysctl.d/mmap_min_addr.conf": + owner => "root", + group => "root", + mode => 0644, + ensure => present, + content => "vm.mmap_min_addr = 4096\n", + } + + exec { "/etc/init.d/procps restart": + subscribe => File["/etc/sysctl.d/mmap_min_addr.conf"], + refreshonly => true, + } +} |