confdroid_selinux/manifests/params.pp

## cd_selinux::params.pp
# Module name: cd_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
# # License:
#    This file is part of cd_selinux.
#
#    cd_selinux is used for providing automatic configuration of SELINUX.
#    Copyright (C) 2016  ConfDroid (copyright@ConfDroid.com)
#    This program is free software: you can redistribute it and/or modify
#    it under the terms of the GNU General Public License as published by
#    the Free Software Foundation, either version 3 of the License, or
#    (at your option) any later version.
#
#    This program is distributed in the hope that it will be useful,
#    but WITHOUT ANY WARRANTY; without even the implied warranty of
#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#    GNU General Public License for more details.
#
#    You should have received a copy of the GNU General Public License
#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
# @summary  Class holds all parameters for the cd_selinux module and is
#   inherited by all classes except defines.
# @param  [string] pkg_ensure
#   which [package type](https://confdroid.com/2017/05/puppet-type-package/)
#   to choose, i.e. `latest` or `present`.
# @param  [boolean] sx_install_setools Whether to install additional selinux
#   tools, i.e. for troubleshooting.
# @param  [string] sx_selinux_status The desired selinux status. Used for both
#   managing the configuration file as well as the command line (setenforce).
#   Valid values are `enforcing` and `permissive`. While the configuration file
#   supports another  option 'disabled', this option is not available on
#   commandline.  Note that changing the active selinux status from `disabled`
#   to any the other types requires a manual reboot to re-lable the file system.
#   This module does not do that for you to avoid unexpected outages.
# @param  [string]  sx_selinux_type The desired selinux type. Valid options are
#   `targeted`, `minimum` and `mls`.
##############################################################################
class cd_selinux::params (

$pkg_ensure           = 'latest',

$sx_install_setools   = false,
$sx_selinux_status    = 'enforcing',
$sx_selinux_type      = 'targeted',

) {

# installation section
$reqpackages_main  = $::operatingsystem ? {
    /(?i-mx:centos|fedora|redhat)/ => ['selinux-policy','policycoreutils'],
  }

$reqpackages_tools  = $::operatingsystem ? {
    /(?i-mx:centos|fedora|redhat)/ => ['setroubleshoot-server',
                                        'policycoreutils-python'],
  }

# directories
$sx_main_dir        = '/etc/selinux'

# files
$sx_main_file       = "${sx_main_dir}/config"
$sx_main_file_erb   = 'cd_selinux/main/selinux_config.erb'


# includes must be last
  include cd_selinux::main::config
}