On Mon, Feb 4, 2013 at 6:11 PM, Reid Vandewiele <notifications@github.com>wrote:

> In manifests/access.pp:
>
> > @@ -15,7 +15,15 @@
> >      fail("Permission must be + or - ; recieved $permission")
> >    }
> >
> > -  realize Concat['/etc/security/access.conf']
> > +  $access_conf = "/etc/security/access.conf"
> > +
> > +  realize Concat[$accessr_.conf]
>
> They are virtual so that users can do things like
>
> include pam
>
> without accidentally writing blanks to their access.conf or limits.conf
> files. Basically, some mechanism to ensure that the files are only ever
> declared once needs to be employed. One way is to use virtual resources;
> another is to use (and I only endorse this within defined types) the
> defined() function; another way is to use include. In this case I used
> virtual resources.
>
>
I suspected this was the case.