confdroid_alloy/manifests/main/files.pp

## alloy_cd::main::files.pp
# Module name: alloy_cd
# Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary Class manages required config files for the alloy_cd module
###############################################################################
class alloy_cd::main::files (

) inherits alloy_cd::params {
  require alloy_cd::main::dirs

  # Ensure log_targets is always an array
  $log_targets_array = Array($alloy_cd::params::ay_log_targets, true)

  file { $ay_main_file:
    ensure   => file,
    owner    => 'root',
    group    => 'root',
    mode     => '0644',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
    content  => template('alloy_cd/config.alloy.erb'),
    notify   => Service[$ay_service],
  }

  # manage logrotate for rsyslog to allow adm group membership
  file { '/etc/logrotate.d/rsyslog':
    ensure   => file,
    owner    => 'root',
    group    => 'root',
    mode     => '0644',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
    content  => template('alloy_cd/logrotate.rsyslog.erb'),
  }

  # manage log file group permissions
  file { '/var/log/messages':
    ensure => file,
    owner  => 'root',
    group  => 'adm',
    mode   => '0640',
  }

  file { '/var/log/secure':
    ensure => file,
    owner  => 'root',
    group  => 'adm',
    mode   => '0640',
  }
}