gistfile1.txt

#grep maxlogins /etc/security/limits.conf /etc/security/limits.d/*
mycommand to be run:
  - cmd
  - run

so this is what I am doing:

# blah blah disclosure 
# Procedure:
#grep maxlogins /etc/security/limits.conf /etc/security/limits.d/*
# blah blah more stuff here

{% if not 0  == salt['cmd.retcode']('grep "'"^[^#].*maxlogins"'" /etc/security/limits.conf /etc/security/limits.d/* > /dev/null 2>&1') %}
add_security_limits:
  cmd.run:
    - names:
      - 'echo "#Configured to meet V-22298" >> /etc/security/limits.d/V-22298.conf'
      - 'echo "* hard maxlogins 10" >> /etc/security/limits.d/V-22298.conf'
{% endif %}

So it runs fine. But when I add the tombstone I see this in the output:

[ERROR ] Command 'grep "^[^#].maxlogins" /etc/security/limits.conf /etc/security/limits.d/ > /dev/null 2>&1' failed with return code: 2
[ERROR ] output:

it still runs fine, but I see the error. Otherwise I just see info stuff, which is what I would expect even with the tombstone.

thought?

add_security_limits:
  cmd.run:
    - names:
      - 'echo "#Configured to meet V-22298" >> /etc/security/limits.d/V-22298.conf'
      - 'echo "* hard maxlogins 10" >> /etc/security/limits.d/V-22298.conf'
    - unless: grep '^[^#].*maxlogins' /etc/security/limits.conf /etc/security/limits.d/*