class nodo::subsystem::grsec {
  include nodo::utils::security::grsec

  nodo::subsystem::sysctl::entry { 'kernel.grsecurity.grsec_lock':
    order => 'zz',
    value => 1,
  }

  nodo::subsystem::sysctl::entry { 'kernel.grsecurity.rwxmap_logging':
    order => 'xx',
    value => 0,
  }

  # Old configs
  file { [ '/etc/sysctl.d/kernel.grsecurity.rwxmap_logging.conf', '/etc/sysctl.d/kernel.grsecurity.grsec_lock.conf' ]:
    ensure => absent,
  }
}