| OLD | NEW |
| (Empty) |
| 1 # == Class: adblockplus::sudo | |
| 2 # | |
| 3 # Mixin class to ensure super-user privileges can only be acquired through | |
| 4 # the sudo(8) system daemon. | |
| 5 # | |
| 6 # === Parameters: | |
| 7 # | |
| 8 # [*ensure*] | |
| 9 # Whether associated resources are meant to be 'present' or 'absent'. | |
| 10 # | |
| 11 # === Examples: | |
| 12 # | |
| 13 # class {'adblockplus::sudo': | |
| 14 # ensure => 'present', | |
| 15 # } | |
| 16 # | |
| 17 class adblockplus::sudo ( | |
| 18 $ensure = 'present', | |
| 19 ) { | |
| 20 | |
| 21 # https://forge.puppetlabs.com/puppetlabs/stdlib | |
| 22 include stdlib | |
| 23 | |
| 24 # Obligatory despite the package being included with all environments | |
| 25 ensure_packages(['sudo']) | |
| 26 | |
| 27 # User root must not be able to login via password | |
| 28 ensure_resource('user', 'root', {'password' => '*'}) | |
| 29 | |
| 30 # The root account must not be accessible directly via SSH | |
| 31 file {'/root/.ssh/authorized_keys': | |
| 32 ensure => 'absent', | |
| 33 } | |
| 34 | |
| 35 # Prerequisite for the accompanying kick.py and run.py scripts | |
| 36 file {'/etc/sudoers.d/puppet': | |
| 37 ensure => $ensure, | |
| 38 group => 'root', | |
| 39 mode => 0440, | |
| 40 owner => 'root', | |
| 41 require => Package['sudo'], | |
| 42 source => 'puppet:///modules/adblockplus/sudoers/puppet' | |
| 43 } | |
| 44 } | |
| OLD | NEW |