dammit. ferm is smarter than me

[mirror/dsa-puppet.git] / modules / ferm / manifests / real.pp

diff --git a/modules/ferm/manifests/real.pp b/modules/ferm/manifests/real.pp
index e3a1a0f..447ab75 100644 (file)
--- a/modules/ferm/manifests/real.pp
+++ b/modules/ferm/manifests/real.pp
@@ -9,19 +9,22 @@ class ferm::real inherits ferm {
                 "/etc/ferm/ferm.conf":
                         source  => "puppet:///ferm/ferm.conf",
                         require => Package["ferm"],
+                        mode    => 0400,
                         notify  => Exec["ferm restart"];
                 "/etc/ferm/conf.d/me.conf":
                         content => template("ferm/me.conf.erb"),
                         require => Package["ferm"],
+                        mode    => 0400,
                         notify  => Exec["ferm restart"];
                 "/etc/ferm/conf.d/defs.conf":
                         source  => "puppet:///ferm/defs.conf",
                         require => Package["ferm"],
+                        mode    => 0400,
                         notify  => Exec["ferm restart"];
         }
 
         Exec["ferm restart"] {
-                path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
+                command     => "/etc/init.d/ferm restart",
                 refreshonly => true,
         }
 }