########################################################
#
# Insert users into the passwd file of a system by
# extracting named users from a master file - repeat
# for /etc/shadow
#
########################################################

body common control

{
bundlesequence  => { "updateusers" };
}

########################################################

bundle agent updateusers

{
vars:

  # Set $(testing) to "" for production

  "testing"  string => "/home/mark/tmp";
  "tmp"      string => "$(testing)/etc/passwd_tmp";

  "extract_users" slist => { "mark", "root", "at", "www-run" };

files:

  #
  # Take the passwed entries from source and add them to real_passwd
  #

  "$(tmp)"

       create    => "true",
       edit_line => SelectUsers("$(testing)/masterfiles/passwd","@(this.extract_users)");

  #
  # Intermediate file - should be secure - not in /tmp
  #

  "$(testing)/etc/passwd"

       edit_line => ReplaceUsers("$(tmp)","@(this.extract_users)");

  #

  "$(testing)/home/$(extract_users)/."

       create => "true",
       perms => userdir("$(extract_users)");
}






########################################################
# Library stuff
########################################################

body perms userdir(u)
{
mode => "755";
owners => { "$(u)" };
groups => { "users" };
}

########################################################

bundle edit_line SelectUsers(f,l)
  {
  insert_lines:

     "$(f)" 

       insert_type => "file",
       insert_select => keep("@(l)");
  }

########################################################

bundle edit_line ReplaceUsers(f,l)
  {
  delete_lines:

     "$(f)" 
       delete_select => discard("@(l)");

  insert_lines:

     "$(f)" 

       insert_type => "file";
  }

########################################################

body insert_select keep(s)
{
insert_if_startwith_from_list => { @(s) };
}

########################################################

body delete_select discard(s)
{
delete_if_not_startwith_from_list => { @(s) };
}