body common control { bundlesequence => { "set_Posix_acls" }; } bundle agent set_Posix_acls { vars: "shared_directories" slist => { "/home/shared", "/home/archive" }; files: "$(shared_directories)/." acl => crazy_acls; } body acl crazy_acls { acl_type => "Posix"; aces => {"user:backup:rwx", "group:games:rx"}; }