summaryrefslogtreecommitdiff
path: root/lib/chef/resources.rb
diff options
context:
space:
mode:
authorRyan Cragun <ryan@chef.io>2019-07-24 17:12:57 -0600
committerRyan Cragun <ryan@chef.io>2019-07-24 17:18:53 -0600
commitfae44333ff79f116c266507cd2377c211c4d1f8e (patch)
tree1b0f20addb8cf24dc3b60ed223135b6ccc8e5933 /lib/chef/resources.rb
parent6bbf42b0ff11eabdb72067e78e4101ad93820b71 (diff)
downloadchef-fae44333ff79f116c266507cd2377c211c4d1f8e.tar.gz
Add mac_user resource that is compatible with macOS >= 10.14
Provide a user resource that is compatible with default TCC restrictions that were introduced in macOS 10.14. Changes: * This resource and the corresponding provider have been modified to work with default macOS TCC policies. Direct access to user binary plists are no longer permitted by default, thus we've chosen to use use newer methods of creating, modifying and removing users. * Due to the tooling required by the provider this provider is only suitable for use on macOS >= 10.14. Support for older platforms has been removed. New Features: * Primary group management is now included. * 'admin' is now a boolean property that configures a user to an admin. * 'admin_username' and 'admin_password' are new properties that define the admin user credentials required for toggling SecureToken for an exiting user. The 'admin_username' must correspond to a system admin with SecureToken enabled in order to toggle SecureToken. * 'secure_token' is a boolean property that sets the desired state for SecureToken. SecureToken token is required for FileVault full disk encryption. Signed-off-by: Ryan Cragun <ryan@chef.io>
Diffstat (limited to 'lib/chef/resources.rb')
-rw-r--r--lib/chef/resources.rb1
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/chef/resources.rb b/lib/chef/resources.rb
index d76f1bbf06..235c1e41a1 100644
--- a/lib/chef/resources.rb
+++ b/lib/chef/resources.rb
@@ -116,6 +116,7 @@ require_relative "resource/user"
require_relative "resource/user/aix_user"
require_relative "resource/user/dscl_user"
require_relative "resource/user/linux_user"
+require_relative "resource/user/mac_user"
require_relative "resource/user/pw_user"
require_relative "resource/user/solaris_user"
require_relative "resource/user/windows_user"