Compare commits

...

29 Commits

Author SHA1 Message Date
Jenkins
fd61b6adf8 Merge branch 'jenkins-build-8' into 'master'
Auto-merge for build 8

See merge request puppet/confdroid_selinux!8
2026-04-05 17:59:07 +02:00
Jenkins Server
0584cedaa6 Recommit for updates in build 8 2026-04-05 17:52:34 +02:00
Jenkins Server
f0696c8855 Merge remote-tracking branch 'origin/master' into jenkins-build-8 2026-04-05 17:51:47 +02:00
054a912251 OP#563 remove ls step 2026-04-05 17:51:32 +02:00
Jenkins
de87db9463 Merge branch 'jenkins-build-7' into 'master'
Auto-merge for build 7

See merge request puppet/confdroid_selinux!7
2026-04-05 15:24:15 +00:00
Jenkins Server
417df9a5a9 Recommit for updates in build 7 2026-04-05 17:24:07 +02:00
Jenkins Server
2cafa1f21a Merge remote-tracking branch 'origin/master' into jenkins-build-7 2026-04-05 17:23:37 +02:00
b766962f39 OP#563 remove ls step 2026-04-05 17:23:17 +02:00
dc4f967292 OP#563 add ls step 2026-04-05 17:22:32 +02:00
Jenkins
2e2287d340 Merge branch 'jenkins-build-6' into 'master'
Auto-merge for build 6

See merge request puppet/confdroid_selinux!6
2026-04-05 15:20:17 +00:00
Jenkins Server
1b68d737ea Merge remote-tracking branch 'origin/master' into jenkins-build-6 2026-04-05 17:19:42 +02:00
b949a0a661 OP#563 add ls step 2026-04-05 17:19:25 +02:00
Jenkins
d7711096f5 Merge branch 'jenkins-build-5' into 'master'
Auto-merge for build 5

See merge request puppet/confdroid_selinux!5
2026-04-05 15:11:27 +00:00
Jenkins Server
69c2aa17d0 Merge remote-tracking branch 'origin/master' into jenkins-build-5 2026-04-05 17:10:52 +02:00
e307d7a02e OP#563 update Readme 2026-04-05 17:10:34 +02:00
Jenkins
17c5c0485b Merge branch 'jenkins-build-4' into 'master'
Auto-merge for build 4

See merge request puppet/confdroid_selinux!4
2026-04-05 15:09:57 +00:00
Jenkins Server
d7a244b217 Merge remote-tracking branch 'origin/master' into jenkins-build-4 2026-04-05 17:09:22 +02:00
a5e4dc02ba OP#563 fix package name 2026-04-05 17:09:07 +02:00
Jenkins
2557193779 Merge branch 'jenkins-build-3' into 'master'
Auto-merge for build 3

See merge request puppet/confdroid_selinux!3
2026-04-05 14:57:47 +00:00
Jenkins Server
994f2ad8e2 Merge remote-tracking branch 'origin/master' into jenkins-build-3 2026-04-05 16:57:12 +02:00
1aae89edca OP#563 fix package name 2026-04-05 16:56:55 +02:00
Jenkins
18808850c6 Merge branch 'jenkins-build-2' into 'master'
Auto-merge for build 2

See merge request puppet/confdroid_selinux!2
2026-04-05 14:54:39 +00:00
Jenkins Server
d0bc29f161 Merge remote-tracking branch 'origin/master' into jenkins-build-2 2026-04-05 16:54:02 +02:00
5c2a2e215c OP#563 add proper badge 2026-04-05 16:53:43 +02:00
34877c45c8 OP#563 edit install and README 2026-04-05 16:52:50 +02:00
Jenkins
19c4f9d973 Merge branch 'jenkins-build-1' into 'master'
Auto-merge for build 1

See merge request puppet/confdroid_selinux!1
2026-04-05 14:48:00 +00:00
6b55c6afbe OP#563 inital commit after fork 2026-04-05 16:46:48 +02:00
88494b74de OP#563 inital commit after fork 2026-04-05 16:45:14 +02:00
Jenkins
df53e0ccab Merge branch 'jenkins-build-3' into 'master'
Auto-merge for build 3

See merge request puppet/cd_selinux!1
2025-08-17 20:48:14 +00:00
22 changed files with 216 additions and 349 deletions

1
.gitignore vendored
View File

@@ -2,3 +2,4 @@
Gemfile.lock
FileList
.scannerwork
.vscode

3
.puppet-lint.rc Normal file
View File

@@ -0,0 +1,3 @@
--no-variable_scope-check
--no-top_scope_facts
--no-140chars-check

10
.vscode/settings.json vendored
View File

@@ -1,10 +0,0 @@
{
"cSpell.words": [
"getenforce",
"policycoreutils",
"setenforce",
"setools",
"setroubleshoot",
"sysconfig"
]
}

105
Jenkinsfile vendored
View File

@@ -1,105 +0,0 @@
pipeline {
agent {
label 'puppet'
}
post {
always {
deleteDir() /* clean up our workspace */
}
success {
updateGitlabCommitStatus state: 'success'
}
failure {
updateGitlabCommitStatus state: 'failed'
step([$class: 'Mailer', notifyEveryUnstableBuild: true, recipients: 'support@confdroid.com', sendToIndividuals: true])
}
}
options {
gitLabConnection('gitlab.confdroid.com')
}
stages {
stage('pull master') {
steps {
sshagent(['edd05eb6-26b5-4c7b-a5cc-ea2ab899f4fa']) {
sh '''
git config user.name "Jenkins Server"
git config user.email jenkins@confdroid.com
# Ensure we're on the development branch (triggered by push)
git checkout development
# Create jenkins branch from development
git checkout -b jenkins-build-$BUILD_NUMBER
# Optionally merge master into jenkins to ensure compatibility
git merge origin/master --no-ff || { echo "Merge conflict detected"; exit 1; }
'''
}
}
}
stage('puppet parser') {
steps {
sh '''for file in $(find . -iname \'*.pp\'); do
/opt/puppetlabs/bin/puppet parser validate --color false --render-as s --modulepath=modules $file || exit 1;
done;'''
}
}
stage('check templates') {
steps{
sh '''for file in $(find . -iname \'*.erb\');
do erb -P -x -T "-" $file | ruby -c || exit 1;
done;'''
}
}
stage('puppet-lint') {
steps {
sh '''/usr/local/bin/puppet-lint . \\
--no-variable_scope-check \\
|| { echo "Puppet lint failed"; exit 1; }
'''
}
}
stage('SonarScan') {
steps {
withCredentials([string(credentialsId: 'sonar-token', variable: 'SONAR_TOKEN')]) {
sh '''
/opt/sonar-scanner/bin/sonar-scanner \
-Dsonar.projectKey=cd_selinux \
-Dsonar.sources=. \
-Dsonar.host.url=https://sonarqube.confdroid.com \
-Dsonar.token=$SONAR_TOKEN
'''
}
}
}
stage('create Puppet documentation') {
steps {
sh '/opt/puppetlabs/bin/puppet strings'
}
}
stage('update repo') {
steps {
sshagent(['edd05eb6-26b5-4c7b-a5cc-ea2ab899f4fa']) {
sh '''
git config user.name "Jenkins Server"
git config user.email jenkins@confdroid.com
git add -A && git commit -am "Recommit for updates in build $BUILD_NUMBER" || echo "No changes to commit"
git push -o merge_request.create \
-o merge_request.target=master \
-o merge_request.title="Auto-merge for build $BUILD_NUMBER" \
-o merge_request.description="Automated changes from Jenkins build $BUILD_NUMBER" \
-o merge_request.merge_when_pipeline_succeeds=true \
origin jenkins-build-$BUILD_NUMBER
'''
}
}
}
}
}

View File

@@ -1,14 +1,13 @@
# Readme
[![Build Status](https://jenkins.confdroid.com/buildStatus/icon?job=cd_selinux)](https://jenkins.confdroid.com/job/cd_selinux/)
[[_TOC_]]
[![Build Status](https://jenkins.confdroid.com/buildStatus/icon?job=confdroid_selinux&style=plastic)](https://jenkins.confdroid.com/job/confdroid_selinux/)
[![Security Hotspots](https://sonarqube.confdroid.com/api/project_badges/measure?project=confdroid_selinux&metric=security_hotspots&token=sqb_cc73d9e100a7cda91c7f45b8a7690bd16498e852)](https://sonarqube.confdroid.com/dashboard?id=confdroid_selinux)
## Synopsis
[Security-Enhanced Linux (SELinux)](https://en.wikipedia.org/wiki/Security-Enhanced_Linux) is a Linux kernel security module that provides a mechanism for supporting access control security policies.
`cd_selinux` is a Puppet module to automate installation, configuration and troubleshooting of selinux.
`confdroid_selinux` is a Puppet module to automate installation, configuration and troubleshooting of selinux.
## WARNING
@@ -18,12 +17,12 @@
Installation:
* install binaries required for selinux and related tools
- install binaries required for selinux and related tools
Configuration
* manage `/etc/sysconfig/selinux` file (file system permissions, selinux context, content)
* manage current selinux status (permissive,enforcing)
- manage `/etc/sysconfig/selinux` file (file system permissions, selinux context, content)
- manage current selinux status (permissive,enforcing)
## Repo Documentation
@@ -33,23 +32,23 @@ See the full Puppet documentation including parameters in `docs/index.html`.
All dependencies must be included in the catalogue.
* [cd_resources](https://gitlab.confdroid.com/puppet/cd_resources) for yum repo resources.
- [confdroid_resources](https://sourcecode.confdroid.com/confdroid/confdroid_resources) for yum repo resources.
## Deployment
* native Puppet deployment
- native Puppet deployment
via site.pp or nodes.pp
```ruby
node 'example.example.net' {
include cd_selinux
include confdroid_selinux
}
```
* through Foreman:
- through Foreman:
In order to apply parameters through Foreman, **__cd_selinux::params__** must be added to the host or host group in question.
In order to apply parameters through Foreman, **confdroid_selinux::params*- must be added to the host or host group in question.
See [more details about class deployment on Confdroid.com](https://confdroid.com/2017/05/deploying-our-puppet-modules/).
@@ -59,25 +58,26 @@ All files and directories are configured with correct selinux context. If selinu
## Known Problems
* Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will **__not__** do the reboot for you to avoid unexpected outages.
- Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will **not**- do the reboot for you to avoid unexpected outages.
## Support
* OS: CentOS 7
* Puppet 5,6
- OS: Rocky 9 (any RHEL9-based OS should work, but Rocky has been tested)
- Puppet 8
## Tests
* Puppet Lint
* excluded tests:
* `--no-variable_scope-check`: not applicable as we are inheriting parameters from params class. the lint check does not distinguish between facts and inherited parameters.
* Puppet Parser
* ERB Template Parser
* Sonar Quality Gate
- Puppet Lint
- excluded tests:
- `--no-variable_scope-check`: not applicable as we are inheriting parameters from params class. the lint check does not distinguish between facts and inherited parameters.
- Puppet Parser
- ERB Template Parser
- Sonar Quality Gate
## Contact Us
[contact Us](https://confdroid.com/contact/)
- [contact Us](https://confdroid.com/contact/)
- [Feedback Portal](https://feedback.confdroid.com/)
## Disclaimer

View File

@@ -69,32 +69,32 @@
<ul>
<li>
<span class='object_link'><a href="puppet_classes/cd_selinux.html" title="puppet_classes::cd_selinux (puppet_class)">cd_selinux</a></span>
<span class='object_link'><a href="puppet_classes/confdroid_selinux.html" title="puppet_classes::confdroid_selinux (puppet_class)">confdroid_selinux</a></span>
</li>
<li>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::cd_selinux::main::config (puppet_class)">cd_selinux::main::config</a></span>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_selinux::main::config (puppet_class)">confdroid_selinux::main::config</a></span>
</li>
<li>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::cd_selinux::main::dirs (puppet_class)">cd_selinux::main::dirs</a></span>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::confdroid_selinux::main::dirs (puppet_class)">confdroid_selinux::main::dirs</a></span>
</li>
<li>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::cd_selinux::main::files (puppet_class)">cd_selinux::main::files</a></span>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::confdroid_selinux::main::files (puppet_class)">confdroid_selinux::main::files</a></span>
</li>
<li>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::cd_selinux::main::install (puppet_class)">cd_selinux::main::install</a></span>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_selinux::main::install (puppet_class)">confdroid_selinux::main::install</a></span>
</li>
<li>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span>
</li>

View File

@@ -60,15 +60,13 @@
<div id="content"><div id='filecontents'>
<h1 id="label-Readme">Readme</h1>
<p><a href="https://jenkins.confdroid.com/job/cd_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=cd_selinux"></a></p>
<p>[[<em>TOC</em>]]</p>
<p><a href="https://jenkins.confdroid.com/job/confdroid_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=confdroid_selinux&amp;style=plastic"></a> <a href="https://sonarqube.confdroid.com/dashboard?id=confdroid_selinux"><img src="https://sonarqube.confdroid.com/api/project_badges/measure?project=confdroid_selinux&amp;metric=security_hotspots&amp;token=sqb_cc73d9e100a7cda91c7f45b8a7690bd16498e852"></a></p>
<h2 id="label-Synopsis">Synopsis</h2>
<p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p>
<p><code>cd_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
<p><code>confdroid_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
<h2 id="label-WARNING">WARNING</h2>
@@ -96,7 +94,7 @@
<p>All dependencies must be included in the catalogue.</p>
<ul><li>
<p><a href="https://gitlab.confdroid.com/puppet/cd_resources">cd_resources</a> for yum repo resources.</p>
<p><a href="https://sourcecode.confdroid.com/confdroid/confdroid_resources">confdroid_resources</a> for yum repo resources.</p>
</li></ul>
<h2 id="label-Deployment">Deployment</h2>
@@ -107,14 +105,14 @@
<p>via site.pp or nodes.pp</p>
<pre class="code ruby"><code class="ruby">node &#39;example.example.net&#39; {
include cd_selinux
include confdroid_selinux
}
</code></pre>
<ul><li>
<p>through Foreman:</p>
</li></ul>
<p>In order to apply parameters through Foreman, <strong>cd_selinux::params</strong> must be added to the host or host group in question.</p>
<p>In order to apply parameters through Foreman, *<em>confdroid_selinux::params</em>- must be added to the host or host group in question.</p>
<p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p>
@@ -124,14 +122,14 @@
<h2 id="label-Known+Problems">Known Problems</h2>
<ul><li>
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong> do the reboot for you to avoid unexpected outages.</p>
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong>- do the reboot for you to avoid unexpected outages.</p>
</li></ul>
<h2 id="label-Support">Support</h2>
<ul><li>
<p>OS: CentOS 7</p>
<p>OS: Rocky 9 (any RHEL9-based OS should work, but Rocky has been tested)</p>
</li><li>
<p>Puppet 5,6</p>
<p>Puppet 8</p>
</li></ul>
<h2 id="label-Tests">Tests</h2>
@@ -151,8 +149,11 @@
</li></ul>
<h2 id="label-Contact+Us">Contact Us</h2>
<ul><li>
<p><a href="https://confdroid.com/contact/">contact Us</a></p>
</li><li>
<p><a href="https://feedback.confdroid.com/">Feedback Portal</a></p>
</li></ul>
<h2 id="label-Disclaimer">Disclaimer</h2>

View File

@@ -60,15 +60,13 @@
<div id="content"><div id='filecontents'>
<h1 id="label-Readme">Readme</h1>
<p><a href="https://jenkins.confdroid.com/job/cd_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=cd_selinux"></a></p>
<p>[[<em>TOC</em>]]</p>
<p><a href="https://jenkins.confdroid.com/job/confdroid_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=confdroid_selinux&amp;style=plastic"></a> <a href="https://sonarqube.confdroid.com/dashboard?id=confdroid_selinux"><img src="https://sonarqube.confdroid.com/api/project_badges/measure?project=confdroid_selinux&amp;metric=security_hotspots&amp;token=sqb_cc73d9e100a7cda91c7f45b8a7690bd16498e852"></a></p>
<h2 id="label-Synopsis">Synopsis</h2>
<p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p>
<p><code>cd_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
<p><code>confdroid_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
<h2 id="label-WARNING">WARNING</h2>
@@ -96,7 +94,7 @@
<p>All dependencies must be included in the catalogue.</p>
<ul><li>
<p><a href="https://gitlab.confdroid.com/puppet/cd_resources">cd_resources</a> for yum repo resources.</p>
<p><a href="https://sourcecode.confdroid.com/confdroid/confdroid_resources">confdroid_resources</a> for yum repo resources.</p>
</li></ul>
<h2 id="label-Deployment">Deployment</h2>
@@ -107,14 +105,14 @@
<p>via site.pp or nodes.pp</p>
<pre class="code ruby"><code class="ruby">node &#39;example.example.net&#39; {
include cd_selinux
include confdroid_selinux
}
</code></pre>
<ul><li>
<p>through Foreman:</p>
</li></ul>
<p>In order to apply parameters through Foreman, <strong>cd_selinux::params</strong> must be added to the host or host group in question.</p>
<p>In order to apply parameters through Foreman, *<em>confdroid_selinux::params</em>- must be added to the host or host group in question.</p>
<p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p>
@@ -124,14 +122,14 @@
<h2 id="label-Known+Problems">Known Problems</h2>
<ul><li>
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong> do the reboot for you to avoid unexpected outages.</p>
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong>- do the reboot for you to avoid unexpected outages.</p>
</li></ul>
<h2 id="label-Support">Support</h2>
<ul><li>
<p>OS: CentOS 7</p>
<p>OS: Rocky 9 (any RHEL9-based OS should work, but Rocky has been tested)</p>
</li><li>
<p>Puppet 5,6</p>
<p>Puppet 8</p>
</li></ul>
<h2 id="label-Tests">Tests</h2>
@@ -151,8 +149,11 @@
</li></ul>
<h2 id="label-Contact+Us">Contact Us</h2>
<ul><li>
<p><a href="https://confdroid.com/contact/">contact Us</a></p>
</li><li>
<p><a href="https://feedback.confdroid.com/">Feedback Portal</a></p>
</li></ul>
<h2 id="label-Disclaimer">Disclaimer</h2>

View File

@@ -36,44 +36,44 @@
<ul id="full_list" class="puppet_class">
<li id="object_puppet_classes::cd_selinux" class="odd">
<li id="object_puppet_classes::confdroid_selinux" class="odd">
<div class="item">
<span class='object_link'><a href="puppet_classes/cd_selinux.html" title="puppet_classes::cd_selinux (puppet_class)">cd_selinux</a></span>
<span class='object_link'><a href="puppet_classes/confdroid_selinux.html" title="puppet_classes::confdroid_selinux (puppet_class)">confdroid_selinux</a></span>
</div>
</li>
<li id="object_puppet_classes::cd_selinux::main::config" class="even">
<li id="object_puppet_classes::confdroid_selinux::main::config" class="even">
<div class="item">
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::cd_selinux::main::config (puppet_class)">cd_selinux::main::config</a></span>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_selinux::main::config (puppet_class)">confdroid_selinux::main::config</a></span>
</div>
</li>
<li id="object_puppet_classes::cd_selinux::main::dirs" class="odd">
<li id="object_puppet_classes::confdroid_selinux::main::dirs" class="odd">
<div class="item">
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::cd_selinux::main::dirs (puppet_class)">cd_selinux::main::dirs</a></span>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::confdroid_selinux::main::dirs (puppet_class)">confdroid_selinux::main::dirs</a></span>
</div>
</li>
<li id="object_puppet_classes::cd_selinux::main::files" class="even">
<li id="object_puppet_classes::confdroid_selinux::main::files" class="even">
<div class="item">
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::cd_selinux::main::files (puppet_class)">cd_selinux::main::files</a></span>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::confdroid_selinux::main::files (puppet_class)">confdroid_selinux::main::files</a></span>
</div>
</li>
<li id="object_puppet_classes::cd_selinux::main::install" class="odd">
<li id="object_puppet_classes::confdroid_selinux::main::install" class="odd">
<div class="item">
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::cd_selinux::main::install (puppet_class)">cd_selinux::main::install</a></span>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_selinux::main::install (puppet_class)">confdroid_selinux::main::install</a></span>
</div>
</li>
<li id="object_puppet_classes::cd_selinux::params" class="even">
<li id="object_puppet_classes::confdroid_selinux::params" class="even">
<div class="item">
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span>
</div>
</li>

View File

@@ -4,7 +4,7 @@
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>
Puppet Class: cd_selinux
Puppet Class: confdroid_selinux
&mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript">
pathId = "puppet_classes::cd_selinux";
pathId = "puppet_classes::confdroid_selinux";
relpath = '../';
</script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo;
<span class="title">cd_selinux</span>
<span class="title">confdroid_selinux</span>
</div>
@@ -59,7 +59,7 @@
<div class="clear"></div>
</div>
<div id="content"><h1>Puppet Class: cd_selinux</h1>
<div id="content"><h1>Puppet Class: confdroid_selinux</h1>
<div class="box_info">
@@ -72,13 +72,13 @@
</div>
<h2>Summary</h2>
Class initializes the cd_selinux Module.
Class initializes the confdroid_selinux Module.
<h2>Overview</h2>
<div class="docstring">
<div class="discussion">
<p>cd_selinux::init.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@confdroid.com)</p>
<p>confdroid_selinux::init.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@confdroid.com)</p>
</div>
</div>
@@ -103,8 +103,8 @@
<td>
<pre class="code"><span class="info file"># File 'manifests/init.pp', line 6</span>
class cd_selinux {
include cd_selinux::params
class confdroid_selinux {
include confdroid_selinux::params
}</pre>
</td>
</tr>

View File

@@ -4,7 +4,7 @@
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>
Puppet Class: cd_selinux::main::config
Puppet Class: confdroid_selinux::main::config
&mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript">
pathId = "puppet_classes::cd_selinux::main::config";
pathId = "puppet_classes::confdroid_selinux::main::config";
relpath = '../';
</script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo;
<span class="title">cd_selinux::main::config</span>
<span class="title">confdroid_selinux::main::config</span>
</div>
@@ -59,12 +59,12 @@
<div class="clear"></div>
</div>
<div id="content"><h1>Puppet Class: cd_selinux::main::config</h1>
<div id="content"><h1>Puppet Class: confdroid_selinux::main::config</h1>
<div class="box_info">
<dl>
<dt>Inherits:</dt>
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
</dl>
@@ -77,13 +77,13 @@
</div>
<h2>Summary</h2>
Class manages the module logic for cd_selinux.
Class manages the module logic for confdroid_selinux.
<h2>Overview</h2>
<div class="docstring">
<div class="discussion">
<p>cd_selinux::main::config.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
<p>confdroid_selinux::main::config.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
</div>
</div>
@@ -119,17 +119,17 @@
<td>
<pre class="code"><span class="info file"># File 'manifests/main/config.pp', line 6</span>
class cd_selinux::main::config (
class confdroid_selinux::main::config (
) inherits cd_selinux::params {
include cd_selinux::main::files
) inherits confdroid_selinux::params {
include confdroid_selinux::main::files
if $sx_selinux_status == &#39;enforcing&#39; {
exec { &#39;set_selinux_status&#39;:
command =&gt; &#39;setenforce 1&#39;,
path =&gt; [&#39;/usr/sbin&#39;,&#39;/usr/bin&#39;],
provider =&gt; shell,
unless =&gt; &#39;getenforce | grep -i &quot;enforcing&quot;&#39;
unless =&gt; &#39;getenforce | grep -i &quot;enforcing&quot;&#39;,
}
}
}</pre>

View File

@@ -4,7 +4,7 @@
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>
Puppet Class: cd_selinux::main::dirs
Puppet Class: confdroid_selinux::main::dirs
&mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript">
pathId = "puppet_classes::cd_selinux::main::dirs";
pathId = "puppet_classes::confdroid_selinux::main::dirs";
relpath = '../';
</script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo;
<span class="title">cd_selinux::main::dirs</span>
<span class="title">confdroid_selinux::main::dirs</span>
</div>
@@ -59,12 +59,12 @@
<div class="clear"></div>
</div>
<div id="content"><h1>Puppet Class: cd_selinux::main::dirs</h1>
<div id="content"><h1>Puppet Class: confdroid_selinux::main::dirs</h1>
<div class="box_info">
<dl>
<dt>Inherits:</dt>
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
</dl>
@@ -77,13 +77,13 @@
</div>
<h2>Summary</h2>
Class manages all directories required for cd_selinux.
Class manages all directories required for confdroid_selinux.
<h2>Overview</h2>
<div class="docstring">
<div class="discussion">
<p>cd_selinux::main::dirs.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
<p>confdroid_selinux::main::dirs.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
</div>
</div>
@@ -122,10 +122,10 @@
<td>
<pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 6</span>
class cd_selinux::main::dirs (
class confdroid_selinux::main::dirs (
) inherits cd_selinux::params {
require cd_selinux::main::install
) inherits confdroid_selinux::params {
require confdroid_selinux::main::install
file { $sx_main_dir:
ensure =&gt; directory,

View File

@@ -4,7 +4,7 @@
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>
Puppet Class: cd_selinux::main::files
Puppet Class: confdroid_selinux::main::files
&mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript">
pathId = "puppet_classes::cd_selinux::main::files";
pathId = "puppet_classes::confdroid_selinux::main::files";
relpath = '../';
</script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo;
<span class="title">cd_selinux::main::files</span>
<span class="title">confdroid_selinux::main::files</span>
</div>
@@ -59,12 +59,12 @@
<div class="clear"></div>
</div>
<div id="content"><h1>Puppet Class: cd_selinux::main::files</h1>
<div id="content"><h1>Puppet Class: confdroid_selinux::main::files</h1>
<div class="box_info">
<dl>
<dt>Inherits:</dt>
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
</dl>
@@ -77,13 +77,13 @@
</div>
<h2>Summary</h2>
Class manages all configuration files required for cd_selinux.
Class manages all configuration files required for confdroid_selinux.
<h2>Overview</h2>
<div class="docstring">
<div class="discussion">
<p>cd_selinux::main::files.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
<p>confdroid_selinux::main::files.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
</div>
</div>
@@ -123,10 +123,10 @@
<td>
<pre class="code"><span class="info file"># File 'manifests/main/files.pp', line 6</span>
class cd_selinux::main::files (
class confdroid_selinux::main::files (
) inherits cd_selinux::params {
require cd_selinux::main::dirs
) inherits confdroid_selinux::params {
require confdroid_selinux::main::dirs
file { $sx_main_file:
ensure =&gt; file,

View File

@@ -4,7 +4,7 @@
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>
Puppet Class: cd_selinux::main::install
Puppet Class: confdroid_selinux::main::install
&mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript">
pathId = "puppet_classes::cd_selinux::main::install";
pathId = "puppet_classes::confdroid_selinux::main::install";
relpath = '../';
</script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo;
<span class="title">cd_selinux::main::install</span>
<span class="title">confdroid_selinux::main::install</span>
</div>
@@ -59,12 +59,12 @@
<div class="clear"></div>
</div>
<div id="content"><h1>Puppet Class: cd_selinux::main::install</h1>
<div id="content"><h1>Puppet Class: confdroid_selinux::main::install</h1>
<div class="box_info">
<dl>
<dt>Inherits:</dt>
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
</dl>
@@ -78,13 +78,13 @@
<h2>Summary</h2>
Class manage all aspects of installing binaries required for
cd_selinux
confdroid_selinux
<h2>Overview</h2>
<div class="docstring">
<div class="discussion">
<p>cd_selinux::main::install.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
<p>confdroid_selinux::main::install.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
</div>
</div>
@@ -110,30 +110,18 @@ cd_selinux
12
13
14
15
16
17
18
19
20
21</pre>
15</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'manifests/main/install.pp', line 7</span>
class cd_selinux::main::install (
class confdroid_selinux::main::install (
) inherits cd_selinux::params {
require cd_resources
) inherits confdroid_selinux::params {
require confdroid_resources
package { $reqpackages_main:
ensure =&gt; $pkg_ensure,
}
if $sx_install_setools == true {
package { $reqpackages_tools:
ensure =&gt; $pkg_ensure,
}
package { $sx_reqpackages:
ensure =&gt; $sx_pkg_ensure,
}
}</pre>
</td>

View File

@@ -4,7 +4,7 @@
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>
Puppet Class: cd_selinux::params
Puppet Class: confdroid_selinux::params
&mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript">
pathId = "puppet_classes::cd_selinux::params";
pathId = "puppet_classes::confdroid_selinux::params";
relpath = '../';
</script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo;
<span class="title">cd_selinux::params</span>
<span class="title">confdroid_selinux::params</span>
</div>
@@ -59,7 +59,7 @@
<div class="clear"></div>
</div>
<div id="content"><h1>Puppet Class: cd_selinux::params</h1>
<div id="content"><h1>Puppet Class: confdroid_selinux::params</h1>
<div class="box_info">
@@ -67,13 +67,13 @@
<dt>Inherited by:</dt>
<dd>
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::cd_selinux::main::dirs (puppet_class)">cd_selinux::main::dirs</a></span><br/>
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::confdroid_selinux::main::dirs (puppet_class)">confdroid_selinux::main::dirs</a></span><br/>
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::cd_selinux::main::files (puppet_class)">cd_selinux::main::files</a></span><br/>
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::confdroid_selinux::main::files (puppet_class)">confdroid_selinux::main::files</a></span><br/>
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::cd_selinux::main::config (puppet_class)">cd_selinux::main::config</a></span><br/>
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_selinux::main::config (puppet_class)">confdroid_selinux::main::config</a></span><br/>
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::cd_selinux::main::install (puppet_class)">cd_selinux::main::install</a></span><br/>
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_selinux::main::install (puppet_class)">confdroid_selinux::main::install</a></span><br/>
</dd>
</dl>
@@ -87,14 +87,14 @@
</div>
<h2>Summary</h2>
Class holds all parameters for the cd_selinux module and is
Class holds all parameters for the confdroid_selinux module and is
inherited by all classes except defines.
<h2>Overview</h2>
<div class="docstring">
<div class="discussion">
<p>cd_selinux::params.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
<p>confdroid_selinux::params.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
</div>
</div>
@@ -107,7 +107,7 @@ inherited by all classes except defines.
<li>
<span class='name'>pkg_ensure</span>
<span class='name'>sx_pkg_ensure</span>
<span class='type'>(<tt>String</tt>)</span>
@@ -125,18 +125,18 @@ inherited by all classes except defines.
<li>
<span class='name'>sx_install_setools</span>
<span class='name'>sx_reqpackages</span>
<span class='type'>(<tt>Boolean</tt>)</span>
<span class='type'>(<tt>Array[String]</tt>)</span>
<em class="default">(defaults to: <tt>false</tt>)</em>
<em class="default">(defaults to: <tt>[&#39;selinux-policy&#39;,&#39;policycoreutils&#39;,&#39;setroubleshoot-server&#39;,&#39;policycoreutils-python-utils&#39;]</tt>)</em>
&mdash;
<div class='inline'>
<p>Whether to install additional selinux tools, i.e. for troubleshooting.</p>
<p>List of packages required for selinux management. The default list includes the following packages: <code>selinux-policy</code>, <code>policycoreutils</code>, <code>setroubleshoot-server</code>, <code>policycoreutils-python</code>.</p>
</div>
</li>
@@ -188,8 +188,6 @@ inherited by all classes except defines.
<pre class="lines">
21
22
23
24
25
@@ -214,39 +212,35 @@ inherited by all classes except defines.
44
45
46
47
48</pre>
47</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 21</span>
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 23</span>
class cd_selinux::params (
class confdroid_selinux::params (
String $pkg_ensure = &#39;latest&#39;,
Boolean $sx_install_setools = false,
String $sx_selinux_status = &#39;enforcing&#39;,
String $sx_selinux_type = &#39;targeted&#39;,
Array[String] $sx_reqpackages = [&#39;selinux-policy&#39;,&#39;policycoreutils&#39;,&#39;setroubleshoot-server&#39;,&#39;policycoreutils-python-utils&#39;],
String $sx_pkg_ensure = &#39;latest&#39;,
String $sx_selinux_status = &#39;enforcing&#39;,
String $sx_selinux_type = &#39;targeted&#39;,
) {
# installation section
$reqpackages_main = $::operatingsystem ? {
/(?i-mx:centos|fedora|redhat)/ =&gt; [&#39;selinux-policy&#39;,&#39;policycoreutils&#39;],
}
$reqpackages_tools = $::operatingsystem ? {
/(?i-mx:centos|fedora|redhat)/ =&gt; [&#39;setroubleshoot-server&#39;,&#39;policycoreutils-python&#39;],
}
# default facts
$fqdn = $facts[&#39;networking&#39;][&#39;fqdn&#39;]
$hostname = $facts[&#39;networking&#39;][&#39;hostname&#39;]
$domain = $facts[&#39;networking&#39;][&#39;domain&#39;]
$os_name = $facts[&#39;os&#39;][&#39;name&#39;]
$os_release = $facts[&#39;os&#39;][&#39;release&#39;][&#39;major&#39;]
# directories
$sx_main_dir = &#39;/etc/selinux&#39;
$sx_main_dir = &#39;/etc/selinux&#39;
# files
$sx_main_file = &quot;${sx_main_dir}/config&quot;
$sx_main_file_erb = &#39;cd_selinux/main/selinux_config.erb&#39;
$sx_main_file = &quot;${sx_main_dir}/config&quot;
$sx_main_file_erb = &#39;confdroid_selinux/main/selinux_config.erb&#39;
# includes must be last
include cd_selinux::main::config
include confdroid_selinux::main::config
}</pre>
</td>
</tr>

View File

@@ -1,8 +1,8 @@
## cd_selinux::init.pp
# Module name: cd_selinux
# Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary Class initializes the cd_selinux Module.
## confdroid_selinux::init.pp
# Module name: confdroid_selinux
# Author: 12ww1160 (12ww1160@confdroid.com)
# @summary Class initializes the confdroid_selinux Module.
##############################################################################
class cd_selinux {
include cd_selinux::params
class confdroid_selinux {
include confdroid_selinux::params
}

View File

@@ -1,19 +1,19 @@
## cd_selinux::main::config.pp
# Module name: cd_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary Class manages the module logic for cd_selinux.
## confdroid_selinux::main::config.pp
# Module name: confdroid_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary Class manages the module logic for confdroid_selinux.
##############################################################################
class cd_selinux::main::config (
class confdroid_selinux::main::config (
) inherits cd_selinux::params {
include cd_selinux::main::files
) inherits confdroid_selinux::params {
include confdroid_selinux::main::files
if $sx_selinux_status == 'enforcing' {
exec { 'set_selinux_status':
command => 'setenforce 1',
path => ['/usr/sbin','/usr/bin'],
provider => shell,
unless => 'getenforce | grep -i "enforcing"'
unless => 'getenforce | grep -i "enforcing"',
}
}
}

View File

@@ -1,12 +1,12 @@
## cd_selinux::main::dirs.pp
# Module name: cd_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary Class manages all directories required for cd_selinux.
## confdroid_selinux::main::dirs.pp
# Module name: confdroid_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary Class manages all directories required for confdroid_selinux.
###############################################################################
class cd_selinux::main::dirs (
class confdroid_selinux::main::dirs (
) inherits cd_selinux::params {
require cd_selinux::main::install
) inherits confdroid_selinux::params {
require confdroid_selinux::main::install
file { $sx_main_dir:
ensure => directory,

View File

@@ -1,12 +1,12 @@
## cd_selinux::main::files.pp
# Module name: cd_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary Class manages all configuration files required for cd_selinux.
## confdroid_selinux::main::files.pp
# Module name: confdroid_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary Class manages all configuration files required for confdroid_selinux.
##############################################################################
class cd_selinux::main::files (
class confdroid_selinux::main::files (
) inherits cd_selinux::params {
require cd_selinux::main::dirs
) inherits confdroid_selinux::params {
require confdroid_selinux::main::dirs
file { $sx_main_file:
ensure => file,

View File

@@ -1,21 +1,15 @@
## cd_selinux::main::install.pp
# Module name: cd_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
## confdroid_selinux::main::install.pp
# Module name: confdroid_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary Class manage all aspects of installing binaries required for
# cd_selinux
# confdroid_selinux
###############################################################################
class cd_selinux::main::install (
class confdroid_selinux::main::install (
) inherits cd_selinux::params {
require cd_resources
) inherits confdroid_selinux::params {
require confdroid_resources
package { $reqpackages_main:
ensure => $pkg_ensure,
}
if $sx_install_setools == true {
package { $reqpackages_tools:
ensure => $pkg_ensure,
}
package { $sx_reqpackages:
ensure => $sx_pkg_ensure,
}
}

View File

@@ -1,13 +1,15 @@
## cd_selinux::params.pp
# Module name: cd_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary Class holds all parameters for the cd_selinux module and is
## confdroid_selinux::params.pp
# Module name: confdroid_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary Class holds all parameters for the confdroid_selinux module and is
# inherited by all classes except defines.
# @param [String] pkg_ensure
# @param [String] sx_pkg_ensure
# which [package type](https://confdroid.com/2017/05/puppet-type-package/)
# to choose, i.e. `latest` or `present`.
# @param [Boolean] sx_install_setools Whether to install additional selinux
# tools, i.e. for troubleshooting.
# @param [Array[String]] sx_reqpackages
# List of packages required for selinux management. The default list includes
# the following packages: `selinux-policy`, `policycoreutils`,
# `setroubleshoot-server`, `policycoreutils-python`.
# @param [String] sx_selinux_status The desired selinux status. Used for both
# managing the configuration file as well as the command line (setenforce).
# Valid values are `enforcing` and `permissive`. While the configuration file
@@ -15,34 +17,31 @@
# commandline. Note that changing the active selinux status from `disabled`
# to any the other types requires a manual reboot to re-label the file system.
# This module does not do that for you to avoid unexpected outages.
# @param [String] sx_selinux_type The desired selinux type. Valid options are
# @param [String] sx_selinux_type The desired selinux type. Valid options are
# `targeted`, `minimum` and `mls`.
##############################################################################
class cd_selinux::params (
class confdroid_selinux::params (
String $pkg_ensure = 'latest',
Boolean $sx_install_setools = false,
String $sx_selinux_status = 'enforcing',
String $sx_selinux_type = 'targeted',
Array[String] $sx_reqpackages = ['selinux-policy','policycoreutils','setroubleshoot-server','policycoreutils-python-utils'],
String $sx_pkg_ensure = 'latest',
String $sx_selinux_status = 'enforcing',
String $sx_selinux_type = 'targeted',
) {
# installation section
$reqpackages_main = $::operatingsystem ? {
/(?i-mx:centos|fedora|redhat)/ => ['selinux-policy','policycoreutils'],
}
$reqpackages_tools = $::operatingsystem ? {
/(?i-mx:centos|fedora|redhat)/ => ['setroubleshoot-server','policycoreutils-python'],
}
# default facts
$fqdn = $facts['networking']['fqdn']
$hostname = $facts['networking']['hostname']
$domain = $facts['networking']['domain']
$os_name = $facts['os']['name']
$os_release = $facts['os']['release']['major']
# directories
$sx_main_dir = '/etc/selinux'
$sx_main_dir = '/etc/selinux'
# files
$sx_main_file = "${sx_main_dir}/config"
$sx_main_file_erb = 'cd_selinux/main/selinux_config.erb'
$sx_main_file = "${sx_main_dir}/config"
$sx_main_file_erb = 'confdroid_selinux/main/selinux_config.erb'
# includes must be last
include cd_selinux::main::config
include confdroid_selinux::main::config
}

View File

@@ -1,6 +1,7 @@
################################################################################
########## /etc/selinux/config managed by Puppet ##########
########## manual changes will be overwritten !!! ##########
########## manual changes will be overwritten !!! ##########
########## original file: https://3for.me/wdtuj ##########
################################################################################
SELINUX=<%= @sx_selinux_status %>