confdroid/confdroid_haproxy
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

OP#706 extend exec to run only if found off

Browse Source
This commit is contained in:
Arne Teuke
2026-09-07 14:54:48 +02:00
parent 7df6938b04
commit ad2428456a
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.vscode/settings.json vendored
View File

@@ -4,10 +4,12 @@
"dontlognull", "dontlognull",
"dport", "dport",
"forwardfor", "forwardfor",
"getsebool",
"httplog", "httplog",
"managehome", "managehome",
"maxconn", "maxconn",
"nologin", "nologin",
"onlyif",
"pidfile", "pidfile",
"redispatch", "redispatch",
"roundrobin", "roundrobin",

3
manifests/main/config.pp
View File

@@ -14,7 +14,8 @@ class confdroid_haproxy::main::config (
if $hy_selinux_allow_stats == true { if $hy_selinux_allow_stats == true {
exec { 'setsebool haproxy_connect_any on': exec { 'setsebool haproxy_connect_any on':
path => ['/bin', '/usr/bin', '/sbin', '/usr/sbin'], path => ['/bin', '/usr/bin', '/sbin', '/usr/sbin'],
onlyif => '/usr/sbin/getsebool haproxy_connect_any | /usr/bin/grep -q " --> off$"',
} }
} }
} }