57 lines
1.5 KiB
Puppet
57 lines
1.5 KiB
Puppet
## confdroid_alloy::main::files.pp
|
|
# Module name: confdroid_alloy
|
|
# Author: 12ww1160 (12ww1160@confdroid.com)
|
|
# @summary Class manages required config files for the confdroid_alloy module
|
|
###############################################################################
|
|
class confdroid_alloy::main::files (
|
|
|
|
) inherits confdroid_alloy::params {
|
|
require confdroid_alloy::main::dirs
|
|
|
|
# Ensure log_targets is always an array
|
|
$log_targets_array = Array($confdroid_alloy::params::ay_log_targets, true)
|
|
|
|
file { $ay_main_file:
|
|
ensure => file,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
selrange => s0,
|
|
selrole => object_r,
|
|
seltype => etc_t,
|
|
seluser => system_u,
|
|
content => template('confdroid_alloy/config.alloy.erb'),
|
|
notify => Service[$ay_service],
|
|
}
|
|
|
|
# manage logrotate for rsyslog to allow adm group membership
|
|
file { '/etc/logrotate.d/rsyslog':
|
|
ensure => file,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
selrange => s0,
|
|
selrole => object_r,
|
|
seltype => etc_t,
|
|
seluser => system_u,
|
|
content => template('confdroid_alloy/logrotate.rsyslog.erb'),
|
|
}
|
|
|
|
# manage log file group permissions
|
|
file { '/var/log/messages':
|
|
ensure => file,
|
|
owner => 'root',
|
|
group => 'adm',
|
|
mode => '0640',
|
|
notify => Service[$ay_service],
|
|
}
|
|
|
|
file { '/var/log/secure':
|
|
ensure => file,
|
|
owner => 'root',
|
|
group => 'adm',
|
|
mode => '0640',
|
|
notify => Service[$ay_service],
|
|
}
|
|
}
|