OP#421 add dirs settings

manifests/main/dirs.pp

@@ -8,6 +8,201 @@ class confdroid_nagios::main::dirs (
 ) inherits confdroid_nagios::params {
   if $ng_nagios_server == $fqdn {
     require confdroid_nagios::main::user
-    #config here
+
+    file { $ng_main_dir:
+      ensure   => directory,
+      path     => $ng_main_dir,
+      owner    => 'root',
+      group    => 'root',
+      mode     => '0755',
+      selrange => s0,
+      selrole  => object_r,
+      seltype  => nagios_etc_t,
+      seluser  => system_u,
+    }
+
+    # /usr/lib64/nagios dir required for plugins
+
+    file { $ng_lib_dir:
+      ensure   => directory,
+      path     => $ng_lib_dir,
+      owner    => 'root',
+      group    => 'root',
+      mode     => '0755',
+      selrange => s0,
+      selrole  => object_r,
+      seltype  => lib_t,
+      seluser  => system_u,
+    }
+
+    # /var/spool/nagios
+
+    file { $ng_spool_dir:
+      ensure   => directory,
+      path     => $ng_spool_dir,
+      owner    => $ng_user,
+      group    => $ng_user,
+      mode     => '0755',
+      selrange => s0,
+      selrole  => object_r,
+      seltype  => nagios_spool_t,
+      seluser  => system_u,
+    }
+
+    if $::fqdn == $ng_nagios_server {
+      # /etc/nagios/conf.d
+
+      file { $ng_conf_d_dir:
+        ensure   => directory,
+        path     => $ng_conf_d_dir,
+        owner    => 'root',
+        group    => $ng_user,
+        mode     => '0750',
+        selrange => s0,
+        selrole  => object_r,
+        seltype  => nagios_etc_t,
+        seluser  => system_u,
+      }
+
+      # /etc/nagios/objects
+
+      file { $ng_objects_dir:
+        ensure   => directory,
+        path     => $ng_objects_dir,
+        owner    => 'root',
+        group    => $ng_user,
+        mode     => '0750',
+        selrange => s0,
+        selrole  => object_r,
+        seltype  => nagios_etc_t,
+        seluser  => system_u,
+      }
+
+      # /etc/nagios/private
+
+      file { $ng_private_dir:
+        ensure   => directory,
+        path     => $ng_private_dir,
+        owner    => 'root',
+        group    => $ng_user,
+        mode     => '0750',
+        selrange => s0,
+        selrole  => object_r,
+        seltype  => nagios_etc_t,
+        seluser  => system_u,
+      }
+
+      # include dir
+
+      file { $ng_usr_incl:
+        ensure   => directory,
+        path     => $ng_usr_incl,
+        owner    => 'root',
+        group    => 'root',
+        mode     => '0755',
+        selrange => s0,
+        selrole  => object_r,
+        seltype  => usr_t,
+        seluser  => system_u,
+      }
+
+      # log dir
+
+      file { $ng_log_dir:
+        ensure   => directory,
+        path     => $ng_log_dir,
+        owner    => $ng_user,
+        group    => $ng_user,
+        mode     => '0750',
+        selrange => s0,
+        selrole  => object_r,
+        seltype  => nagios_log_t,
+        seluser  => system_u,
+      }
+
+      # log archives
+
+      file { $ng_log_archives:
+        ensure   => directory,
+        path     => $ng_log_archives,
+        owner    => $ng_user,
+        group    => $ng_user,
+        mode     => '0750',
+        selrange => s0,
+        selrole  => object_r,
+        seltype  => nagios_log_t,
+        seluser  => system_u,
+      }
+
+      # /usr/share/nagios
+
+      file { $ng_usr_share:
+        ensure   => directory,
+        path     => $ng_usr_share,
+        owner    => 'root',
+        group    => 'root',
+        mode     => '0755',
+        selrange => s0,
+        selrole  => object_r,
+        seltype  => usr_t,
+        seluser  => system_u,
+      }
+
+      #  /usr/share/nagios/html
+
+      file { $ng_share_html:
+        ensure   => directory,
+        path     => $ng_share_html,
+        owner    => 'root',
+        group    => 'root',
+        mode     => '0755',
+        selrange => s0,
+        selrole  => object_r,
+        seltype  => usr_t,
+        seluser  => system_u,
+      }
+
+      # run dir for pid file
+
+      file { $ng_run_dir:
+        ensure   => directory,
+        path     => $ng_run_dir,
+        owner    => 'nagios',
+        group    => 'nagios',
+        mode     => '0750',
+        selrange => s0,
+        selrole  => object_r,
+        seltype  => nagios_var_run_t,
+        seluser  => system_u,
+      }
+
+      # cmd dir
+
+      file { $ng_cmd_dir:
+        ensure   => directory,
+        path     => $ng_cmd_dir,
+        owner    => 'nagios',
+        group    => 'nagios',
+        mode     => '0775',
+        selrange => s0,
+        selrole  => object_r,
+        seltype  => nagios_spool_t,
+        seluser  => system_u,
+      }
+
+      # checkresults dir
+
+      file { $ng_checkresults_dir:
+        ensure   => directory,
+        path     => $ng_checkresults_dir,
+        owner    => 'nagios',
+        group    => 'nagios',
+        mode     => '0770',
+        selrange => s0,
+        selrole  => object_r,
+        seltype  => nagios_spool_t,
+        seluser  => system_u,
+      }
+    }
   }
 }

manifests/params.pp

@@ -58,6 +58,11 @@ class confdroid_nagios::params (
   $ng_log_dir                 = '/var/log/nagios'
   $ng_log_archives            = "${ng_log_dir}/archives"
   $ng_spool_dir               = '/var/spool/nagios'
+  $ng_usr_share               = '/usr/share/nagios'
+  $ng_share_html              = "${ng_usr_share}/html"
+  $ng_run_dir                 = '/var/run/nagios'
+  $ng_cmd_dir                 = "${ng_spool_dir}/cmd"
+  $ng_checkresults_dir        = "${ng_spool_dir}/checkresults"
 
 # includes must be last
   include confdroid_nagios::main::config