confdroid_nrpe/manifests/main/files.pp

## cd_nrpe::main::files.pp
# Module name: cd_nrpe
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
# # License:
#    This file is part of cd_nrpe.
#
#    cd_nrpe is used for providing automatic configuration of NRPE.
#    Copyright (C) 2016  ConfDroid (copyright@ConfDroid.com)
#    This program is free software: you can redistribute it and/or modify
#    it under the terms of the GNU General Public License as published by
#    the Free Software Foundation, either version 3 of the License, or
#    (at your option) any later version.
#
#    This program is distributed in the hope that it will be useful,
#    but WITHOUT ANY WARRANTY; without even the implied warranty of
#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#    GNU General Public License for more details.
#
#    You should have received a copy of the GNU General Public License
#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
# @summary  Class manages all configuration files required for cd_nrpe.
##############################################################################
class cd_nrpe::main::files (

) inherits cd_nrpe::params {

  require cd_nrpe::main::dirs

  # manage /etc/nagios/nrpe.cfg

  file { $ne_main_conf_file:
    ensure    =>  file,
    path      =>  $ne_main_conf_file,
    owner     =>  'root',
    group     =>  'root',
    mode      =>  '0644',
    selrange  =>  s0,
    selrole   =>  object_r,
    seltype   =>  nrpe_etc_t,
    seluser   =>  system_u,
    content   =>  template($ne_main_conf_erb),
    notify    =>  Service[$ne_service],
  }

  # manage /etc/sysconfig/nrpe

  file { $ne_nrpe_conf_file:
    ensure    =>  file,
    path      =>  $ne_nrpe_conf_file,
    owner     =>  'root',
    group     =>  'root',
    mode      =>  '0644',
    selrange  =>  s0,
    selrole   =>  object_r,
    seltype   =>  etc_t,
    seluser   =>  system_u,
    content   =>  template($ne_nrpe_conf_erb),
    notify    =>  Service[$ne_service],
  }

  if $ne_allow_sudo == true {

    file { $ne_sudo_file:
      ensure    =>  file,
      path      =>  $ne_sudo_file,
      owner     =>  'root',
      group     =>  'root',
      mode      =>  '0440',
      selrange  =>  s0,
      selrole   =>  object_r,
      seltype   =>  etc_t,
      seluser   =>  system_u,
      content   =>  template($ne_sudo_rule_erb),
    }

    # file for sudo  selinux policy
    file { $ne_nrpe_te_file:
      ensure    =>  file,
      path      =>  $ne_nrpe_te_file,
      owner     =>  'root',
      group     =>  'root',
      mode      =>  '0440',
      selrange  =>  s0,
      selrole   =>  object_r,
      seltype   =>  nrpe_etc_t,
      seluser   =>  system_u,
      content   =>  template($ne_nrpe_te_erb),
      notify    =>  Exec['create_nrpe_pp'],
    }
  }
}