Puppet Class: nfs::client::tcpwrappers

Defined in:
manifests/client/tcpwrappers.pp

Summary

Configure TCP wrappers for NFS client services

Overview

Author:



6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
 
# File 'manifests/client/tcpwrappers.pp', line 6

class nfs::client::tcpwrappers {

  assert_private()

  # TCP wrappers was dropped in EL8
  if $nfs::manage_tcpwrappers and $nfs::nfsv3 {
    include 'tcpwrappers'

    # On EL7, the following NFS-client-related executables are dynamically
    # linked to libwrap:
    # * rpc.statd; man page says TCP wrappers under daemon name 'statd'
    # * rpcbind

    # Both resources in common with nfs::server, which may be on this node.
    $_allow_options = { pattern => $nfs::trusted_nets }
    ensure_resource('tcpwrappers::allow', 'rpcbind', $_allow_options)
    ensure_resource('tcpwrappers::allow', 'statd', $_allow_options)
  }
}