aboutsummaryrefslogtreecommitdiff
path: root/manifests/subsystem/sysctl/tcp_challenge_ack_limit.pp
diff options
context:
space:
mode:
Diffstat (limited to 'manifests/subsystem/sysctl/tcp_challenge_ack_limit.pp')
-rw-r--r--manifests/subsystem/sysctl/tcp_challenge_ack_limit.pp2
1 files changed, 1 insertions, 1 deletions
diff --git a/manifests/subsystem/sysctl/tcp_challenge_ack_limit.pp b/manifests/subsystem/sysctl/tcp_challenge_ack_limit.pp
index c1f6650..ca90e27 100644
--- a/manifests/subsystem/sysctl/tcp_challenge_ack_limit.pp
+++ b/manifests/subsystem/sysctl/tcp_challenge_ack_limit.pp
@@ -3,7 +3,7 @@
# http://coolnerd.co/2016/08/researchers-announce-linux-kernel-network-snooping-bug-naked-security/
# https://nakedsecurity.sophos.com/2016/08/12/researchers-announce-linux-kernel-network-snooping-bug/
class nodo::subsystem::sysctl::tcp_challenge_ack_limit(
- $ensure = hiera('nodo::sysctl::tcp_challenge_ack_limit', 'present'),
+ $ensure = lookup('nodo::sysctl::tcp_challenge_ack_limit', undef, undef, 'present'),
) {
file { "/etc/sysctl.d/tcp_challenge_ack_limit.conf":
owner => "root",