body common control
{
	bundlesequence =>	{"build_linux_limits_conf" };
	inputs		=>	{"cfengine_stdlib.cf" };
}


bundle agent build_linux_limits_conf
{
vars:
	linux::
		"limits[glob-dash-nofile]"	string			=>	"*		-	nofile		30000",		policy => "free";
		"limits[app-soft-nproc]"	string			=>	"app		soft	nproc		16357",		policy => "free";

		"values"			slist			=>	getvalues("limits"),					policy => "free";

files:
	linux::
		"/etc/security/limits.final"
			handle						=>	"build_etc_security_limits_final",
			create						=>	"true",
			perms						=>	mog("0644","root","root"),
			edit_line					=>	append_if_no_line("@(build_linux_limits_conf.values)"),
			edit_defaults					=>	empty;

	linux::
		"/etc/security/limits.conf"
			handle						=>	"etc_security_limits_conf",
			perms						=>	mog("0644","root","root"),
			copy_from					=>	backup_cp_md5_compare("/etc/security/limits.final"),
			classes						=>	if_repaired("limits_conf_modified");

reports:
	limits_conf_modified::
		"cf3: /etc/security/limits.conf was modified on $(sys.host)";
}