This repository has been archived by the owner on Jun 9, 2023. It is now read-only.
-
-
Notifications
You must be signed in to change notification settings - Fork 47
/
TODO
79 lines (67 loc) · 2.04 KB
/
TODO
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
0.7.x:
* TODO: Add sudoers support
* TODO: system::files: Added support for processing templates under
templatedir
* TODO: Add rspec-puppet tests for all classes and defines
* TODO: sysctl: Make dynamic changes as well as updating /etc/sysctl.conf
Future:
* TODO: Changes to work on other Linux distributions like Ubuntu, Debian and SuSE
* TODO: setfacl support
setfacl -m u:tomcat1:x /apps/activemq1/service/activemq/supervise
setfacl -m u:tomcat1:w /apps/activemq1/service/activemq/supervise/ok
# setfacl --modify user::rwx supervise supervise/ok
# setfacl --modify user:activemq1:r-x supervise supervise/ok
# setfacl --modify group::r-x supervise supervise/ok
# setfacl --modify mask::r-x supervise supervise/ok
# setfacl --modify other::r-x supervise supervise/ok
system::setfacl::modify:
- files: [ 'supervise', 'supervise/ok' ]
recursive: 'false' # -R
follow_symlinks: 'false' # true: -L; false: -P
no_mask: 'false'
entries:
- user::rwx
- user:activemq1:r-x
- group::r-x
- mask::r-x
- other::r-x
# setfacl --set user:activemq1:r-x supervise supervise/ok
system::setfacl::set:
- files: [ 'supervise', 'supervise/ok' ]
recursive: 'false' # -R
follow_symlinks: 'false' # true: -L; false: -P
no_mask: 'false'
entries:
- user:activemq1:r-x
# setfacl --remove group:staff supervise supervise/ok
system::setfacl::remove:
- files: [ 'supervise', 'supervise/ok' ]
recursive: 'false' # -R
follow_symlinks: 'false' # true: -L; false: -P
remove_all: 'false'
remove_default: 'false'
no_mask: 'false'
entries:
- group:staff
# getfacl -R >file
# setfacl --restore=file
system:setfacl::restore:
test:
cwd: '/apps/tomcat'
owner: tomcat1
group: tomcat
setuid: 'true' # flags: sst
setgid: 'true'
sticky: 'true'
entries:
- user::rwx
- group::r-x
- other::r-x
- user::rwx
- user:activemq1:r-x
- group::r-x
- mask::r-x
- other::r-x
- default:user::rwx
- default:group::r-x
- default:other::-w-