site.pp: Add class 'etc_security_groupconf'; add dialout group to list of groups in /etc/security/group.conf.

1 files changed, 12 insertions, 0 deletions

diff --git a/code/environments/production/manifests/site.pp b/code/environments/production/manifests/site.pp
index f72b520..54de441 100644
--- a/code/environments/production/manifests/site.pp
+++ b/code/environments/production/manifests/site.pp
@@ -130,6 +130,15 @@ class  apt_http_proxy_hotfix {
 	}
 }
 
+class etc_security_groupconf {
+	file_line { 'etc-security-groupconf-update':
+		path               => '/etc/security/group.conf',
+		ensure             => present,
+		line               => '*;*;*;Al0000-2400;audio,bluetooth,cdrom,dialout,dip,floppy,netdev,plugdev,scanner,video',
+		match              => '^\*;\*;\*;Al0000-2400;.*',
+	}
+}
+
 class itzks_systems_common {
 	package { 'itzks-systems-common':
 		ensure => 'latest',
@@ -394,6 +403,7 @@ node /(md-lap-[0-9]+|notebook-[0-9]+|test-notebook)\.intern$/ {
 	class { 'login_manager': }
 	class { 'cups_browsed_polling': }
 	class { 'krb5hostkeytab': }
+	class { 'etc_security_groupconf': }
 }
 
 
@@ -421,6 +431,7 @@ node /((nuc|workstation)-[0-9]+|test-workstation)\.intern$/ {
 	class { 'login_manager': }
 	class { 'cups_browsed_polling': }
 	class { 'krb5hostkeytab': }
+	class { 'etc_security_groupconf': }
 }
 
 # TABLETS
@@ -445,6 +456,7 @@ node /(tab-[0-9]+|test-tablet)\.intern$/ {
 	class { 'itzks_systems_common': }
 	class { 'cups_browsed_polling': }
 	class { 'krb5hostkeytab': }
+	class { 'etc_security_groupconf': }
 }
 
 # default / minimal