Managing Sysctl With CFEngine

Managing sysctl.conf is pretty easy with the cfengine editfiles function:

editfiles:

        { /etc/sysctl.conf
                #Delete lines with that in it, commented or otherwise
                DeleteLinesContaining "net.ipv4.conf.all.log_martians"

                #Define that class if the file was edited
                DefineClasses "reload_sysctl"
        }

shellcommands:
        reload_sysctl::
                #We will get stderr if there is a problem
                "/sbin/sysctl -p >/dev/null"