Re: [Puppet Users] Trying to write a visudo checker

2011-03-06 Thread John Warburton
On 4 March 2011 13:21, Rich Rauenzahn wrote: > This visudo checker I've written (based on some examples from the web > and puppet training materials) causes a dependency loop -- but only > I've approached the problem from another direction and we have a subversion pre-commit hook for the sudoers

Re: [Puppet Users] Trying to write a visudo checker

2011-03-04 Thread Rich Rauenzahn
On 3/4/2011 12:23 AM, Alan Barrett wrote: On Thu, 03 Mar 2011, Rich Rauenzahn wrote: It seems someone got clever and decided to look at exec's and look for managed filenames in argument lists and create implicit dependencies from them? Argh! Yes, the unwanted dependencies are very annoying.

Re: [Puppet Users] Trying to write a visudo checker

2011-03-04 Thread Alan Barrett
On Thu, 03 Mar 2011, Rich Rauenzahn wrote: It seems someone got clever and decided to look at exec's and look for managed filenames in argument lists and create implicit dependencies from them? Argh! Yes, the unwanted dependencies are very annoying. Using file names like /dir/subdir/./file

[Puppet Users] Trying to write a visudo checker

2011-03-03 Thread Rich Rauenzahn
This visudo checker I've written (based on some examples from the web and puppet training materials) causes a dependency loop -- but only when I include the unless => "diff ...". It seems someone got clever and decided to look at exec's and look for managed filenames in argument lists and create i