# we have to do it for each vserver, see
# http://linux-vserver.org/Secure_chroot_Barrier#Solution:_Secure_Barrier
exec { "/usr/sbin/setattr --barrier /etc/vservers/${vs_name}/vdir/../":
- unless => "/usr/sbin/showattr /etc/vservers/${vs_name}/vdir/../ | grep -- '----Bui- /etc/vservers/${vs_name}/vdir/../$'",
+ unless => "/usr/sbin/showattr /etc/vservers/${vs_name}/vdir/../ | /bin/grep -- '----Bui- /etc/vservers/${vs_name}/vdir/../$'",
require => Exec["vserver_instance_${vs_name}"],
}
}
}
- line {"vs_cflags-${vserver}-${flag}":
+ file_line {"vs_cflags-${vserver}-${flag}":
ensure => $ensure,
- file => "/etc/vservers/${vserver}/cflags",
+ path => "/etc/vservers/${vserver}/cflags",
line => "${flag}",
require => Exec["vserver_instance_${vserver}"],
notify => Exec["vattribute-${vserver}-${flag}"],
}
# remove dummy interfaces on the host
- line { modules_dummy:
- file => "/etc/modules",
+ file_line { modules_dummy:
+ path => "/etc/modules",
line => "^dummy",
ensure => absent,
}