# disable lastlog loggin of pam
class loginrecords::lastlog::disable inherits loginrecords::lastlog::enable {
- Replace['loginrecords-lastlog']{
- pattern => '^session[[:space:]]+optional[[:space:]]+pam_lastlog.so$',
- replacement => '#session optional pam_lastlog.so',
+ File_line['loginrecords-lastlog']{
+ match => '^session[[:space:]]+optional[[:space:]]+pam_lastlog.so$',
+ line => '#session optional pam_lastlog.so',
}
File['/var/log/lastlog']{
ensure => absent,
class loginrecords::lastlog::enable(
$pam_login_file = '/etc/pam.d/login'
){
- replace{'loginrecords-lastlog':
- file => $pam_login_file,
- pattern => '^#session[[:space:]]+optional[[:space:]]+pam_lastlog.so$',
- replacement => 'session optional pam_lastlog.so',
+ file_line{'loginrecords-lastlog':
+ path => $pam_login_file,
+ match => '^#session[[:space:]]+optional[[:space:]]+pam_lastlog.so$',
+ line => 'session optional pam_lastlog.so',
}
file{'/var/log/lastlog':
ensure => present,