On 6/1/13 7:14 PM, Jeffrey Blank wrote:
Actually, maybe this is fine this. It will only add lines if there
is
a failure, so this shouldn't be cluttering up sysctl.conf needlessly.
My only concern is that if the default is fine, and was unchanged,
let's not add anything to sysctl.conf.
I was worried about that too! The scripts only get generated upon OVAL
failure, so unless the defaults were found to be lacking it shouldn't be
an issue.