OP#830 add control for directories

README.md

@@ -34,7 +34,7 @@ This module differentiates between client- and server configuration. If the `FQD
 
 If you have no local time server(s), leave  `cy_use_lan_server` at `false` (default), else set it to `true`. This affects only client configurations.
 
-The value for `cy_server_fqdn` is a string rather array, assuming either a single time server or a round-robin DNS entry for this, returning several values for the time server (not configured by this module).
+The value for `cy_server_fqdn` is a string rather array, assuming either a single time server or a round-robin DNS CNAME entry returning several values for the time server (not configured by this module).
 
 INSTALLATION
 

manifests/main/dirs.pp

@@ -9,6 +9,26 @@ class confdroid_ntp::main::dirs (
   require confdroid_ntp::main::install
 
   # /var/log/chrony
+  file { '/var/log/chrony':
+    ensure   => directory,
+    owner    => 'chrony',
+    group    => 'chrony',
+    mode     => '0750',
+    selrange => s0,
+    selrole  => object_r,
+    seltype  => chrony_var_log_t,
+    seluser  => system_u,
+  }
 
   # /var/lib/chrony
+  file { '/var/lib/chrony':
+    ensure   => directory,
+    owner    => 'chrony',
+    group    => 'chrony',
+    mode     => '0750',
+    selrange => s0,
+    selrole  => object_r,
+    seltype  => chrony_var_lib_t,
+    seluser  => system_u,
+  }
 }

templates/chrony.conf.erb

@@ -57,7 +57,6 @@ logdir /var/log/chrony
 
 # Select which information is logged.
 log <%= @cy_loginfo %>
-
 <% end %>
 
 
@@ -117,5 +116,4 @@ logdir /var/log/chrony
 
 # Select which information is logged.
 log <%= @cy_loginfo %>
-
 <% end %>