diff options
Diffstat (limited to 'manifests/sysctl.pp')
-rw-r--r-- | manifests/sysctl.pp | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/manifests/sysctl.pp b/manifests/sysctl.pp new file mode 100644 index 0000000..3bd028c --- /dev/null +++ b/manifests/sysctl.pp @@ -0,0 +1,16 @@ +class sysctl { + # root exploit fix, see http://wiki.debian.org/mmap_min_addr + # TODO: remove in the future or use a sysctl puppet module + file { "/etc/sysctl.d/mmap_min_addr.conf": + owner => "root", + group => "root", + mode => 0644, + ensure => present, + content => "vm.mmap_min_addr = 4096\n", + } + + exec { "/etc/init.d/procps restart": + subscribe => File["/etc/sysctl.d/mmap_min_addr.conf"], + refreshonly => true, + } +} |