## mark a section (Learn more)

exec {"/bin/sed -i -e 's/^session.*pam_loginuid.so$/#&/' /etc/pam.d/*": unless => "/bin/grep -q '^#session.*pam_loginuid\.so' /etc/pam.d/*", }

This paste will be private.