removes selinux checks

This commit is contained in:
Arne Teuke
2018-04-29 13:22:56 +02:00
parent 6ad6c91488
commit db5434475f

View File

@@ -56,60 +56,60 @@ class cd_nagios::selinux::config (
# sealert status.cgi # sealert status.cgi
exec { 'create_policy_statuscgi': # exec { 'create_policy_statuscgi':
command => template($ng_statcgi_erb), # command => template($ng_statcgi_erb),
path => ['/usr/bin','/usr/sbin'], # path => ['/usr/bin','/usr/sbin'],
cwd => $ng_user_home, # cwd => $ng_user_home,
creates => "${ng_user_home}/my-statuscgi.pp", # creates => "${ng_user_home}/my-statuscgi.pp",
notify => Exec['semodule_statuscgi'], # notify => Exec['semodule_statuscgi'],
} # }
exec { 'semodule_statuscgi': # exec { 'semodule_statuscgi':
command => 'semodule -i my-statuscgi.pp', # command => 'semodule -i my-statuscgi.pp',
path => ['/usr/bin','/usr/sbin'], # path => ['/usr/bin','/usr/sbin'],
cwd => $ng_user_home, # cwd => $ng_user_home,
require => Exec['create_policy_statuscgi'], # require => Exec['create_policy_statuscgi'],
refreshonly => true, # refreshonly => true,
notify => Service[$ng_service], # notify => Service[$ng_service],
} # }
# sealert check_nrpe # sealert check_nrpe
exec { 'create_policy_checknrpe': # exec { 'create_policy_checknrpe':
command => template($ng_checknrpe_erb), # command => template($ng_checknrpe_erb),
path => ['/usr/bin','/usr/sbin'], # path => ['/usr/bin','/usr/sbin'],
cwd => $ng_user_home, # cwd => $ng_user_home,
creates => "${ng_user_home}/my-checknrpe.pp", # creates => "${ng_user_home}/my-checknrpe.pp",
notify => Exec['semodule_checknrpe'], # notify => Exec['semodule_checknrpe'],
} # }
exec { 'semodule_checknrpe': # exec { 'semodule_checknrpe':
command => 'semodule -i my-checknrpe.pp', # command => 'semodule -i my-checknrpe.pp',
path => ['/usr/bin','/usr/sbin'], # path => ['/usr/bin','/usr/sbin'],
cwd => $ng_user_home, # cwd => $ng_user_home,
require => Exec['create_policy_checknrpe'], # require => Exec['create_policy_checknrpe'],
refreshonly => true, # refreshonly => true,
notify => Service[$ng_service], # notify => Service[$ng_service],
} # }
# selart check_nagios # selart check_nagios
exec { 'create_policy_checknagios': # exec { 'create_policy_checknagios':
command => template($ng_checknagios_erb), # command => template($ng_checknagios_erb),
path => ['/usr/bin','/usr/sbin'], # path => ['/usr/bin','/usr/sbin'],
cwd => $ng_user_home, # cwd => $ng_user_home,
creates => "${ng_user_home}/my-checknagios.pp", # creates => "${ng_user_home}/my-checknagios.pp",
notify => Exec['semodule_checknagios'], # notify => Exec['semodule_checknagios'],
} # }
exec { 'semodule_checknagios': # exec { 'semodule_checknagios':
command => 'semodule -i my-checknagios.pp', # command => 'semodule -i my-checknagios.pp',
path => ['/usr/bin','/usr/sbin'], # path => ['/usr/bin','/usr/sbin'],
cwd => $ng_user_home, # cwd => $ng_user_home,
require => Exec['create_policy_checknagios'], # require => Exec['create_policy_checknagios'],
refreshonly => true, # refreshonly => true,
notify => Service[$ng_service], # notify => Service[$ng_service],
} # }
# sealert status.dat # sealert status.dat