TelekomLabs/puppet-os-hardening — pull request #39 by 3flex (2014-08-13 01:16:55+00:00)
Title: only run 'update-pam' when needed

There's no need to run `pam-auth-update` on every puppet run - only run it when one of the files that affects the command is added, updated or removed.