diff --git a/manifests/main/exec.pp b/manifests/main/exec.pp index 8d89c70..ebf2b31 100644 --- a/manifests/main/exec.pp +++ b/manifests/main/exec.pp @@ -24,6 +24,17 @@ class cd_nrpe::main::exec ( ) inherits cd_nrpe::params { - # allow sudo + # create policy file fpr sudo selinux policy + exec { 'create_nrpe_pp'> + command => template($ne_checkmodule_nrpe_erb), + user => 'root', + creates => $ne_nrpe_pp_file, + notify => Exec['import_nrpe_policy'], + } + # execute policy file + exec { 'import_nrpe_policy': + command => template + + } } diff --git a/manifests/params.pp b/manifests/params.pp index daddc5b..bae14b2 100644 --- a/manifests/params.pp +++ b/manifests/params.pp @@ -176,8 +176,11 @@ $ne_cmd_head_erb = 'cd_nrpe/cmd_head.erb' $ne_cmd_rule_erb = 'cd_nrpe/cmd_rule.erb' $ne_sudo_file = '/etc/sudoers.d/nagios_sudo' $ne_sudo_rule_erb = 'cd_nrpe/sudo_rule.erb' -$ne_nrpe_te_file = '/etc/nrpe/nrpe.te' +$ne_nrpe_te_file = "${ne_main_conf_d_dir}/nrpe.te" $ne_nrpe_te_erb = 'cd_nrpe/nrpe.te.erb' +$ne_nrpe_mod_file = "${ne_main_conf_d_dir}/nrpe.mod" +$ne_checkmodule_nrpe_erb = 'cd_nrpe/checkmodule_nrpe.erb' +$ne_nrpe_pp_file = "${ne_main_conf_d_dir}/nrpe.pp" # includes must be last diff --git a/templates/checkmodule_nrpe.erb b/templates/checkmodule_nrpe.erb new file mode 100644 index 0000000..39ff411 --- /dev/null +++ b/templates/checkmodule_nrpe.erb @@ -0,0 +1,2 @@ +/bin/checkmodule -M -m -o <%= @ne_nrpe_mod_file %> <%= @ne_nrpe_te_file %> +/bin/semodule_package -o <%= @ne_nrpe_pp_file %> -m <%= @ne_nrpe_mod_file %>