[Puppet Users] Re: /etc/passwd, shadow, group, hosts

2010-04-24 Thread CraftyTech
Thanks for the useful feedback. I know where to start now. Cheers, Henry -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to

Re: [Puppet Users] Logging Exec

2010-04-24 Thread Christian Kauhaus
Am 24.04.2010 01:02, schrieb Douglas Garstang: I need to pass sensitive options, ie passwords, on the command line, and don't want them to appear in log files. I think doing so is generally a bad idea. Command line arguments are world-readable from the process list. Better put the sensitive

Re: [Puppet Users] read-only 'ensure' for File resource?

2010-04-24 Thread Jesús M. Navarro
Hi, Eric: On Saturday 24 April 2010 00:47:20 Eric Sorenson wrote: rlpowell mentioned this earlier on irc and i find myself in a similar boat - I need to express a condition that doesn't fit neatly into the class/parameter model and I'm not quite sure how to do it. i'd like to add a cron

Re: [Puppet Users] read-only 'ensure' for File resource?

2010-04-24 Thread Thomas Bellman
On 04/24/10 00:47, Eric Sorenson wrote: rlpowell mentioned this earlier on irc and i find myself in a similar boat - I need to express a condition that doesn't fit neatly into the class/parameter model and I'm not quite sure how to do it. i'd like to add a cron entry IFF a particular file (not

Re: [Puppet Users] Logging Exec

2010-04-24 Thread Patrick
On Apr 24, 2010, at 3:26 AM, Christian Kauhaus wrote: Am 24.04.2010 01:02, schrieb Douglas Garstang: I need to pass sensitive options, ie passwords, on the command line, and don't want them to appear in log files. I think doing so is generally a bad idea. Command line arguments are

[Puppet Users] Pushing a file only if another does not exist.

2010-04-24 Thread Douglas Garstang
I am trying to write a module for tripwire. I need to push out the twcfg.txt and twpol.txt files only if the tw.cfg and tw.pol files do not currently exist. How can do I this with File{}? I'm can't seem to find a way to do it. In general times, how can you deploy file A only when file B does not

Re: [Puppet Users] Pushing a file only if another does not exist.

2010-04-24 Thread Russ Allbery
Douglas Garstang doug.garst...@gmail.com writes: I am trying to write a module for tripwire. I need to push out the twcfg.txt and twpol.txt files only if the tw.cfg and tw.pol files do not currently exist. How can do I this with File{}? I'm can't seem to find a way to do it. In general

Re: [Puppet Users] Pushing a file only if another does not exist.

2010-04-24 Thread Douglas Garstang
On Sat, Apr 24, 2010 at 4:27 PM, Russ Allbery r...@stanford.edu wrote: Douglas Garstang doug.garst...@gmail.com writes: I am trying to write a module for tripwire. I need to push out the twcfg.txt and twpol.txt files only if the tw.cfg and tw.pol files do not currently exist. How can do I

Re: [Puppet Users] Pushing a file only if another does not exist.

2010-04-24 Thread Russ Allbery
Douglas Garstang doug.garst...@gmail.com writes: On Sat, Apr 24, 2010 at 4:27 PM, Russ Allbery r...@stanford.edu wrote: I think that if you're installing Tripwire policy files on local disk, I would take a step back and see if you have a better design available. Tripwire is the poster child

Re: [Puppet Users] Pushing a file only if another does not exist.

2010-04-24 Thread Douglas Garstang
On Sat, Apr 24, 2010 at 5:00 PM, Russ Allbery r...@stanford.edu wrote: Douglas Garstang doug.garst...@gmail.com writes: On Sat, Apr 24, 2010 at 4:27 PM, Russ Allbery r...@stanford.edu wrote: I think that if you're installing Tripwire policy files on local disk, I would take a step back and

Re: [Puppet Users] Pushing a file only if another does not exist.

2010-04-24 Thread Russ Allbery
Douglas Garstang doug.garst...@gmail.com writes: What about the script that mounts the file system? That could be compromised. This seems somewhat like security via obscurity to me. Your security is only as good as it's weakest link, and the script that runs every day would be the weakest