Add TOTP token enforcement to overpass

[chef.git] / cookbooks / sysctl / recipes / default.rb

diff --git a/cookbooks/sysctl/recipes/default.rb b/cookbooks/sysctl/recipes/default.rb
index adf43e55c9a4448c9697a3ca6cfda7a9eb15a018..f16537c5185c277d12897f8424bf8b6cf58575d9 100644 (file)
--- a/cookbooks/sysctl/recipes/default.rb
+++ b/cookbooks/sysctl/recipes/default.rb
@@ -1,8 +1,8 @@
 #
 #

-# Cookbook Name:: sysctl
+# Cookbook:: sysctl

 # Recipe:: default
 #
 # Recipe:: default
 #

-# Copyright 2010, Tom Hughes
+# Copyright:: 2010, Tom Hughes

 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.


@@ -17,36 +17,36 @@
 # limitations under the License.
 #
 
 # limitations under the License.
 #
 

-package "procps"
-
-directory "/etc/sysctl.d" do
-  owner "root"
-  group "root"
-  mode 0o755
+file "/etc/sysctl.d/60-chef.conf" do
+  action :delete

 end
 
 end
 

-execute "sysctl" do
-  action :nothing
-  command "/sbin/sysctl -p /etc/sysctl.d/60-chef.conf"
-end
+if node[:virtualization][:role] != "guest" ||
+   (node[:virtualization][:system] != "lxc" &&
+    node[:virtualization][:system] != "lxd" &&
+    node[:virtualization][:system] != "openvz")
+  keys = []

 
 

-template "/etc/sysctl.d/60-chef.conf" do
-  source "chef.conf.erb"
-  owner "root"
-  group "root"
-  mode 0o644
-  notifies :run, "execute[sysctl]"
-end
+  Dir.new("/etc/sysctl.d").each_entry do |file|
+    next unless file =~ /^99-chef-(.*)\.conf$/
+
+    keys.push(Regexp.last_match(1))
+  end
+
+  node[:sysctl].each_value do |group|
+    group[:parameters].each do |key, value|
+      sysctl key do
+        value value
+        # comment group[:comment]
+      end

 
 

-node[:sysctl].each_value do |group|
-  group[:parameters].each do |key, value|
-    sysctl_file = "/proc/sys/#{key.tr('.', '/')}"
+      keys.delete(key)
+    end
+  end

 
 

-    file sysctl_file do
-      content "#{value}\n"
-      atomic_update false
-      ignore_failure true
-      only_if { File.exist?(sysctl_file) }
+  keys.each do |key|
+    sysctl key do
+      action :remove

     end
   end
 end
     end
   end
 end