confdroid_fail2ban/manifests/main/dirs.pp

## fail2ban_cd::main::dirs.pp
# Module name: fail2ban_cd
# Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary Class manages all directories required for fail2ban_cd.
###############################################################################
class fail2ban_cd::main::dirs (

) inherits fail2ban_cd::params {
  require fail2ban_cd::main::install

  # manage main dir

  file { $fn_main_dir:
    ensure   => directory,
    path     => $fn_main_dir,
    owner    => 'root',
    group    => 'root',
    mode     => '0755',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
  }

  # manage action.d dir

  file { $fn_action_d_dir:
    ensure   => directory,
    path     => $fn_action_d_dir,
    owner    => 'root',
    group    => 'root',
    mode     => '0755',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
  }

  # manage fail2ban.d dir

  file { $fn_fail2ban_d_dir:
    ensure   => directory,
    path     => $fn_fail2ban_d_dir,
    owner    => 'root',
    group    => 'root',
    mode     => '0755',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
  }

  # manage filter.d dir

  file { $fn_filter_d_dir:
    ensure   => directory,
    path     => $fn_filter_d_dir,
    owner    => 'root',
    group    => 'root',
    mode     => '0755',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
  }

  # manage jail.d dir

  file { $fn_jail_d_dir:
    ensure   => directory,
    path     => $fn_jail_d_dir,
    owner    => 'root',
    group    => 'root',
    mode     => '0755',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
  }

  #  manage /var/lib/fail2ban

  file { $fn_var_lib_dir:
    ensure   => directory,
    path     => $fn_var_lib_dir,
    owner    => 'root',
    group    => 'root',
    mode     => '0755',
    selrange => s0,
    selrole  => object_r,
    seltype  => fail2ban_var_lib_t,
    seluser  => system_u,
  }

  # manage /var/run/fail2bam

  file { $fn_var_run_dir:
    ensure   => directory,
    path     => $fn_var_run_dir,
    owner    => 'root',
    group    => 'root',
    mode     => '0755',
    selrange => s0,
    selrole  => object_r,
    seltype  => fail2ban_var_run_t,
    seluser  => system_u,
  }
}