The class parameter profile_virtual::vmware::files_remove_setuid for removing setuid on files seems like it could be useful for any node.
Perhaps it should be repeated in init.pp, so that there could be a list of files that apply to all nodes.
The idea to have it both places allows for some files to apply to all nodes, then others that apply to just vmware or physical nodes.
The class parameter
profile_virtual::vmware::files_remove_setuid
for removing setuid on files seems like it could be useful for any node. Perhaps it should be repeated in init.pp, so that there could be a list of files that apply to all nodes. The idea to have it both places allows for some files to apply to all nodes, then others that apply to just vmware or physical nodes.