confdroid_clamav/manifests/main/files.pp

## confdroid_clamav::main::files.pp
# Module name: confdroid_clamav
# Author: 12ww1160 (12ww1160@confdroid.com)
# @summary  Class manages all configuration files required for confdroid_clamav.
##############################################################################
class confdroid_clamav::main::files (

) inherits confdroid_clamav::params {
  require confdroid_clamav::main::dirs

  # clamd config file
  file { $cv_clamd_config_file:
    ensure   => file,
    owner    => 'root',
    group    => 'root',
    mode     => '0644',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
    content  => template($cv_clamd_config_erb),
    notify   => Service[$cv_service],
  }

  # freshclam config file
  file { $cv_freshclam_file:
    ensure   => file,
    owner    => 'root',
    group    => 'root',
    mode     => '0600',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
    content  => template($cv_freshclam_erb),
    notify   => Service[$cv_freshclam],
  }

  # freshclam service config file
  file { $cv_freshclam_svc  :
    ensure   => file,
    owner    => 'root',
    group    => 'root',
    mode     => '0600',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
    content  => template($cv_freshclam_svc_erb),
    notify   => Service[$cv_freshclam],
  }

  # clamd service config file
  file { $cv_clamd_svc  :
    ensure   => file,
    owner    => 'root',
    group    => 'root',
    mode     => '0600',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
    content  => template($cv_clamd_svc_erb),
    notify   => Service[$cv_service],
  }

  # shell script for scanning and alerting
  file { $cv_shell_script  :
    ensure   => file,
    owner    => 'root',
    group    => 'root',
    mode     => '0750',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
    content  => template($cv_shell_script_erb),
  }
}