confdroid/confdroid_selinux
1
0
Fork 0
Code Issues Projects Wiki Activity

OP#563 inital commit after fork

Browse Source
This commit is contained in:
Arne Teuke
2026-04-05 16:45:14 +02:00
parent df53e0ccab
commit 88494b74de
27 changed files with 123 additions and 2836 deletions
Download Patch File Download Diff File Expand all files Collapse all files

47
manifests/params.pp
View File

@@ -1,13 +1,15 @@
## cd_selinux::params.pp
# Module name: cd_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary Class holds all parameters for the cd_selinux module and is
## confdroid_selinux::params.pp
# Module name: confdroid_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary Class holds all parameters for the confdroid_selinux module and is
# inherited by all classes except defines.
# @param [String] pkg_ensure
# @param [String] sx_pkg_ensure
# which [package type](https://confdroid.com/2017/05/puppet-type-package/)
# to choose, i.e. `latest` or `present`.
# @param [Boolean] sx_install_setools Whether to install additional selinux
# tools, i.e. for troubleshooting.
# @param [Array[String]] sx_reqpackages
# List of packages required for selinux management. The default list includes
# the following packages: `selinux-policy`, `policycoreutils`,
# `setroubleshoot-server`, `policycoreutils-python`.
# @param [String] sx_selinux_status The desired selinux status. Used for both
# managing the configuration file as well as the command line (setenforce).
# Valid values are `enforcing` and `permissive`. While the configuration file
@@ -15,34 +17,31 @@
# commandline. Note that changing the active selinux status from `disabled`
# to any the other types requires a manual reboot to re-label the file system.
# This module does not do that for you to avoid unexpected outages.
# @param [String] sx_selinux_type The desired selinux type. Valid options are
# @param [String] sx_selinux_type The desired selinux type. Valid options are
# `targeted`, `minimum` and `mls`.
##############################################################################
class cd_selinux::params (
class confdroid_selinux::params (
String $pkg_ensure = 'latest',
Boolean $sx_install_setools = false,
String $sx_selinux_status = 'enforcing',
String $sx_selinux_type = 'targeted',
Array[String] $sx_reqpackages = ['selinux-policy','policycoreutils','setroubleshoot-server','policycoreutils-python'],
String $sx_pkg_ensure = 'latest',
String $sx_selinux_status = 'enforcing',
String $sx_selinux_type = 'targeted',
) {
# installation section
$reqpackages_main = $::operatingsystem ? {
/(?i-mx:centos|fedora|redhat)/ => ['selinux-policy','policycoreutils'],
}
$reqpackages_tools = $::operatingsystem ? {
/(?i-mx:centos|fedora|redhat)/ => ['setroubleshoot-server','policycoreutils-python'],
}
# default facts
$fqdn = $facts['networking']['fqdn']
$hostname = $facts['networking']['hostname']
$domain = $facts['networking']['domain']
$os_name = $facts['os']['name']
$os_release = $facts['os']['release']['major']
# directories
$sx_main_dir = '/etc/selinux'
# files
$sx_main_file = "${sx_main_dir}/config"
$sx_main_file_erb = 'cd_selinux/main/selinux_config.erb'
$sx_main_file_erb = 'confdroid_selinux/main/selinux_config.erb'
# includes must be last
include cd_selinux::main::config
include confdroid_selinux::main::config
}