# Basic security measures class nodo::subsystem::security { # Ensure a modest permission for this place # Frameworks like grsecurity might complain otherwise file { '/usr/local/bin': ensure => directory, owner => "root", group => "root", mode => "0755", } }