From 813436c5524f6a715de9f4bdd21439772edcc256 Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Sat, 19 Aug 2017 13:52:20 -0300
Subject: Remove obsolete packages and configure debsecan

---
 manifests/subsystem/security.pp | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

(limited to 'manifests/subsystem')

diff --git a/manifests/subsystem/security.pp b/manifests/subsystem/security.pp
index faf00bb..701b586 100644
--- a/manifests/subsystem/security.pp
+++ b/manifests/subsystem/security.pp
@@ -8,4 +8,20 @@ class nodo::subsystem::security {
     group   => "root",
     mode    => "0755",
   }
+
+  package { [ 'debsecan', 'debian-security-support' ]:
+    ensure => $::lsbdistcodename ? {
+      'trusty' => absent,
+      default  => present,
+    },
+  }
+
+  file { '/etc/default/debsecan' :
+    ensure  => present,
+    owner   => "root",
+    group   => "root",
+    mode    => "0644",
+    content => template("nodo/debsecan/default.erb"),
+    require => Package['debsecan'],
+  }
 }
-- 
cgit v1.2.3