manifests/subsystem/security.pp


1
2
3
4
5
6
7
8
9
10
11

# Basic security measures
class nodo::subsystem::security {
  # Ensure a modest permission for this place
  # Frameworks like grsecurity might complain otherwise
  file { '/usr/local/bin':
    ensure  => directory,
    owner   => "root",
    group   => "root",
    mode    => "0755",
  }
}