added selinux policy for status.dat
This commit is contained in:
@@ -110,5 +110,24 @@ class cd_nagios::selinux::config (
|
||||
refreshonly => true,
|
||||
notify => Service[$ng_service],
|
||||
}
|
||||
|
||||
# sealert status.dat
|
||||
|
||||
exec { 'create_policy_statusdat':
|
||||
command => template($ng_statdat_erb),
|
||||
path => ['/usr/bin','/usr/sbin'],
|
||||
cwd => $ng_user_home,
|
||||
creates => "${ng_user_home}/my-http.pp",
|
||||
notify => Exec['semodule_statusdat'],
|
||||
}
|
||||
|
||||
exec { 'semodule_statusdat':
|
||||
command => 'semodule -i my-http.pp',
|
||||
path => ['/usr/bin','/usr/sbin'],
|
||||
cwd => $ng_user_home,
|
||||
require => Exec['create_policy_statusdat'],
|
||||
refreshonly => true,
|
||||
notify => Service[$ng_service],
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user