manifests/sudo.pp


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

class profiles::sudo {
  file { '/etc/sudoers':
    validate_cmd => '/usr/bin/visudo -cf %',
    content      => @(EOF)
      Defaults  insults
      root   ALL=(ALL) ALL
      %root  ALL=(ALL) ALL
      %wheel ALL=(ALL) ALL

      @includedir /etc/sudoers.d
      | EOF
  }

  file { '/etc/sudoers.d':
    ensure => directory,
  }
}