Compare commits

..

29 Commits

Author SHA1 Message Date
Jenkins
fd61b6adf8 Merge branch 'jenkins-build-8' into 'master'
Auto-merge for build 8

See merge request puppet/confdroid_selinux!8
2026-04-05 17:59:07 +02:00
Jenkins Server
0584cedaa6 Recommit for updates in build 8 2026-04-05 17:52:34 +02:00
Jenkins Server
f0696c8855 Merge remote-tracking branch 'origin/master' into jenkins-build-8 2026-04-05 17:51:47 +02:00
054a912251 OP#563 remove ls step 2026-04-05 17:51:32 +02:00
Jenkins
de87db9463 Merge branch 'jenkins-build-7' into 'master'
Auto-merge for build 7

See merge request puppet/confdroid_selinux!7
2026-04-05 15:24:15 +00:00
Jenkins Server
417df9a5a9 Recommit for updates in build 7 2026-04-05 17:24:07 +02:00
Jenkins Server
2cafa1f21a Merge remote-tracking branch 'origin/master' into jenkins-build-7 2026-04-05 17:23:37 +02:00
b766962f39 OP#563 remove ls step 2026-04-05 17:23:17 +02:00
dc4f967292 OP#563 add ls step 2026-04-05 17:22:32 +02:00
Jenkins
2e2287d340 Merge branch 'jenkins-build-6' into 'master'
Auto-merge for build 6

See merge request puppet/confdroid_selinux!6
2026-04-05 15:20:17 +00:00
Jenkins Server
1b68d737ea Merge remote-tracking branch 'origin/master' into jenkins-build-6 2026-04-05 17:19:42 +02:00
b949a0a661 OP#563 add ls step 2026-04-05 17:19:25 +02:00
Jenkins
d7711096f5 Merge branch 'jenkins-build-5' into 'master'
Auto-merge for build 5

See merge request puppet/confdroid_selinux!5
2026-04-05 15:11:27 +00:00
Jenkins Server
69c2aa17d0 Merge remote-tracking branch 'origin/master' into jenkins-build-5 2026-04-05 17:10:52 +02:00
e307d7a02e OP#563 update Readme 2026-04-05 17:10:34 +02:00
Jenkins
17c5c0485b Merge branch 'jenkins-build-4' into 'master'
Auto-merge for build 4

See merge request puppet/confdroid_selinux!4
2026-04-05 15:09:57 +00:00
Jenkins Server
d7a244b217 Merge remote-tracking branch 'origin/master' into jenkins-build-4 2026-04-05 17:09:22 +02:00
a5e4dc02ba OP#563 fix package name 2026-04-05 17:09:07 +02:00
Jenkins
2557193779 Merge branch 'jenkins-build-3' into 'master'
Auto-merge for build 3

See merge request puppet/confdroid_selinux!3
2026-04-05 14:57:47 +00:00
Jenkins Server
994f2ad8e2 Merge remote-tracking branch 'origin/master' into jenkins-build-3 2026-04-05 16:57:12 +02:00
1aae89edca OP#563 fix package name 2026-04-05 16:56:55 +02:00
Jenkins
18808850c6 Merge branch 'jenkins-build-2' into 'master'
Auto-merge for build 2

See merge request puppet/confdroid_selinux!2
2026-04-05 14:54:39 +00:00
Jenkins Server
d0bc29f161 Merge remote-tracking branch 'origin/master' into jenkins-build-2 2026-04-05 16:54:02 +02:00
5c2a2e215c OP#563 add proper badge 2026-04-05 16:53:43 +02:00
34877c45c8 OP#563 edit install and README 2026-04-05 16:52:50 +02:00
Jenkins
19c4f9d973 Merge branch 'jenkins-build-1' into 'master'
Auto-merge for build 1

See merge request puppet/confdroid_selinux!1
2026-04-05 14:48:00 +00:00
6b55c6afbe OP#563 inital commit after fork 2026-04-05 16:46:48 +02:00
88494b74de OP#563 inital commit after fork 2026-04-05 16:45:14 +02:00
Jenkins
df53e0ccab Merge branch 'jenkins-build-3' into 'master'
Auto-merge for build 3

See merge request puppet/cd_selinux!1
2025-08-17 20:48:14 +00:00
20 changed files with 216 additions and 234 deletions

1
.gitignore vendored
View File

@@ -2,3 +2,4 @@
Gemfile.lock Gemfile.lock
FileList FileList
.scannerwork .scannerwork
.vscode

3
.puppet-lint.rc Normal file
View File

@@ -0,0 +1,3 @@
--no-variable_scope-check
--no-top_scope_facts
--no-140chars-check

View File

@@ -1,14 +1,13 @@
# Readme # Readme
[![Build Status](https://jenkins.confdroid.com/buildStatus/icon?job=cd_selinux)](https://jenkins.confdroid.com/job/cd_selinux/) [![Build Status](https://jenkins.confdroid.com/buildStatus/icon?job=confdroid_selinux&style=plastic)](https://jenkins.confdroid.com/job/confdroid_selinux/)
[![Security Hotspots](https://sonarqube.confdroid.com/api/project_badges/measure?project=confdroid_selinux&metric=security_hotspots&token=sqb_cc73d9e100a7cda91c7f45b8a7690bd16498e852)](https://sonarqube.confdroid.com/dashboard?id=confdroid_selinux)
[[_TOC_]]
## Synopsis ## Synopsis
[Security-Enhanced Linux (SELinux)](https://en.wikipedia.org/wiki/Security-Enhanced_Linux) is a Linux kernel security module that provides a mechanism for supporting access control security policies. [Security-Enhanced Linux (SELinux)](https://en.wikipedia.org/wiki/Security-Enhanced_Linux) is a Linux kernel security module that provides a mechanism for supporting access control security policies.
`cd_selinux` is a Puppet module to automate installation, configuration and troubleshooting of selinux. `confdroid_selinux` is a Puppet module to automate installation, configuration and troubleshooting of selinux.
## WARNING ## WARNING
@@ -18,12 +17,12 @@
Installation: Installation:
* install binaries required for selinux and related tools - install binaries required for selinux and related tools
Configuration Configuration
* manage `/etc/sysconfig/selinux` file (file system permissions, selinux context, content) - manage `/etc/sysconfig/selinux` file (file system permissions, selinux context, content)
* manage current selinux status (permissive,enforcing) - manage current selinux status (permissive,enforcing)
## Repo Documentation ## Repo Documentation
@@ -33,23 +32,23 @@ See the full Puppet documentation including parameters in `docs/index.html`.
All dependencies must be included in the catalogue. All dependencies must be included in the catalogue.
* [cd_resources](https://gitlab.confdroid.com/puppet/cd_resources) for yum repo resources. - [confdroid_resources](https://sourcecode.confdroid.com/confdroid/confdroid_resources) for yum repo resources.
## Deployment ## Deployment
* native Puppet deployment - native Puppet deployment
via site.pp or nodes.pp via site.pp or nodes.pp
```ruby ```ruby
node 'example.example.net' { node 'example.example.net' {
include cd_selinux include confdroid_selinux
} }
``` ```
* through Foreman: - through Foreman:
In order to apply parameters through Foreman, **__cd_selinux::params__** must be added to the host or host group in question. In order to apply parameters through Foreman, **confdroid_selinux::params*- must be added to the host or host group in question.
See [more details about class deployment on Confdroid.com](https://confdroid.com/2017/05/deploying-our-puppet-modules/). See [more details about class deployment on Confdroid.com](https://confdroid.com/2017/05/deploying-our-puppet-modules/).
@@ -59,25 +58,26 @@ All files and directories are configured with correct selinux context. If selinu
## Known Problems ## Known Problems
* Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will **__not__** do the reboot for you to avoid unexpected outages. - Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will **not**- do the reboot for you to avoid unexpected outages.
## Support ## Support
* OS: CentOS 7 - OS: Rocky 9 (any RHEL9-based OS should work, but Rocky has been tested)
* Puppet 5,6 - Puppet 8
## Tests ## Tests
* Puppet Lint - Puppet Lint
* excluded tests: - excluded tests:
* `--no-variable_scope-check`: not applicable as we are inheriting parameters from params class. the lint check does not distinguish between facts and inherited parameters. - `--no-variable_scope-check`: not applicable as we are inheriting parameters from params class. the lint check does not distinguish between facts and inherited parameters.
* Puppet Parser - Puppet Parser
* ERB Template Parser - ERB Template Parser
* Sonar Quality Gate - Sonar Quality Gate
## Contact Us ## Contact Us
[contact Us](https://confdroid.com/contact/) - [contact Us](https://confdroid.com/contact/)
- [Feedback Portal](https://feedback.confdroid.com/)
## Disclaimer ## Disclaimer

View File

@@ -69,32 +69,32 @@
<ul> <ul>
<li> <li>
<span class='object_link'><a href="puppet_classes/cd_selinux.html" title="puppet_classes::cd_selinux (puppet_class)">cd_selinux</a></span> <span class='object_link'><a href="puppet_classes/confdroid_selinux.html" title="puppet_classes::confdroid_selinux (puppet_class)">confdroid_selinux</a></span>
</li> </li>
<li> <li>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::cd_selinux::main::config (puppet_class)">cd_selinux::main::config</a></span> <span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_selinux::main::config (puppet_class)">confdroid_selinux::main::config</a></span>
</li> </li>
<li> <li>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::cd_selinux::main::dirs (puppet_class)">cd_selinux::main::dirs</a></span> <span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::confdroid_selinux::main::dirs (puppet_class)">confdroid_selinux::main::dirs</a></span>
</li> </li>
<li> <li>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::cd_selinux::main::files (puppet_class)">cd_selinux::main::files</a></span> <span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::confdroid_selinux::main::files (puppet_class)">confdroid_selinux::main::files</a></span>
</li> </li>
<li> <li>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::cd_selinux::main::install (puppet_class)">cd_selinux::main::install</a></span> <span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_selinux::main::install (puppet_class)">confdroid_selinux::main::install</a></span>
</li> </li>
<li> <li>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span> <span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span>
</li> </li>

View File

@@ -60,15 +60,13 @@
<div id="content"><div id='filecontents'> <div id="content"><div id='filecontents'>
<h1 id="label-Readme">Readme</h1> <h1 id="label-Readme">Readme</h1>
<p><a href="https://jenkins.confdroid.com/job/cd_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=cd_selinux"></a></p> <p><a href="https://jenkins.confdroid.com/job/confdroid_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=confdroid_selinux&amp;style=plastic"></a> <a href="https://sonarqube.confdroid.com/dashboard?id=confdroid_selinux"><img src="https://sonarqube.confdroid.com/api/project_badges/measure?project=confdroid_selinux&amp;metric=security_hotspots&amp;token=sqb_cc73d9e100a7cda91c7f45b8a7690bd16498e852"></a></p>
<p>[[<em>TOC</em>]]</p>
<h2 id="label-Synopsis">Synopsis</h2> <h2 id="label-Synopsis">Synopsis</h2>
<p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p> <p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p>
<p><code>cd_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p> <p><code>confdroid_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
<h2 id="label-WARNING">WARNING</h2> <h2 id="label-WARNING">WARNING</h2>
@@ -96,7 +94,7 @@
<p>All dependencies must be included in the catalogue.</p> <p>All dependencies must be included in the catalogue.</p>
<ul><li> <ul><li>
<p><a href="https://gitlab.confdroid.com/puppet/cd_resources">cd_resources</a> for yum repo resources.</p> <p><a href="https://sourcecode.confdroid.com/confdroid/confdroid_resources">confdroid_resources</a> for yum repo resources.</p>
</li></ul> </li></ul>
<h2 id="label-Deployment">Deployment</h2> <h2 id="label-Deployment">Deployment</h2>
@@ -107,14 +105,14 @@
<p>via site.pp or nodes.pp</p> <p>via site.pp or nodes.pp</p>
<pre class="code ruby"><code class="ruby">node &#39;example.example.net&#39; { <pre class="code ruby"><code class="ruby">node &#39;example.example.net&#39; {
include cd_selinux include confdroid_selinux
} }
</code></pre> </code></pre>
<ul><li> <ul><li>
<p>through Foreman:</p> <p>through Foreman:</p>
</li></ul> </li></ul>
<p>In order to apply parameters through Foreman, <strong>cd_selinux::params</strong> must be added to the host or host group in question.</p> <p>In order to apply parameters through Foreman, *<em>confdroid_selinux::params</em>- must be added to the host or host group in question.</p>
<p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p> <p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p>
@@ -124,14 +122,14 @@
<h2 id="label-Known+Problems">Known Problems</h2> <h2 id="label-Known+Problems">Known Problems</h2>
<ul><li> <ul><li>
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong> do the reboot for you to avoid unexpected outages.</p> <p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong>- do the reboot for you to avoid unexpected outages.</p>
</li></ul> </li></ul>
<h2 id="label-Support">Support</h2> <h2 id="label-Support">Support</h2>
<ul><li> <ul><li>
<p>OS: CentOS 7</p> <p>OS: Rocky 9 (any RHEL9-based OS should work, but Rocky has been tested)</p>
</li><li> </li><li>
<p>Puppet 5,6</p> <p>Puppet 8</p>
</li></ul> </li></ul>
<h2 id="label-Tests">Tests</h2> <h2 id="label-Tests">Tests</h2>
@@ -151,8 +149,11 @@
</li></ul> </li></ul>
<h2 id="label-Contact+Us">Contact Us</h2> <h2 id="label-Contact+Us">Contact Us</h2>
<ul><li>
<p><a href="https://confdroid.com/contact/">contact Us</a></p> <p><a href="https://confdroid.com/contact/">contact Us</a></p>
</li><li>
<p><a href="https://feedback.confdroid.com/">Feedback Portal</a></p>
</li></ul>
<h2 id="label-Disclaimer">Disclaimer</h2> <h2 id="label-Disclaimer">Disclaimer</h2>

View File

@@ -60,15 +60,13 @@
<div id="content"><div id='filecontents'> <div id="content"><div id='filecontents'>
<h1 id="label-Readme">Readme</h1> <h1 id="label-Readme">Readme</h1>
<p><a href="https://jenkins.confdroid.com/job/cd_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=cd_selinux"></a></p> <p><a href="https://jenkins.confdroid.com/job/confdroid_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=confdroid_selinux&amp;style=plastic"></a> <a href="https://sonarqube.confdroid.com/dashboard?id=confdroid_selinux"><img src="https://sonarqube.confdroid.com/api/project_badges/measure?project=confdroid_selinux&amp;metric=security_hotspots&amp;token=sqb_cc73d9e100a7cda91c7f45b8a7690bd16498e852"></a></p>
<p>[[<em>TOC</em>]]</p>
<h2 id="label-Synopsis">Synopsis</h2> <h2 id="label-Synopsis">Synopsis</h2>
<p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p> <p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p>
<p><code>cd_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p> <p><code>confdroid_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
<h2 id="label-WARNING">WARNING</h2> <h2 id="label-WARNING">WARNING</h2>
@@ -96,7 +94,7 @@
<p>All dependencies must be included in the catalogue.</p> <p>All dependencies must be included in the catalogue.</p>
<ul><li> <ul><li>
<p><a href="https://gitlab.confdroid.com/puppet/cd_resources">cd_resources</a> for yum repo resources.</p> <p><a href="https://sourcecode.confdroid.com/confdroid/confdroid_resources">confdroid_resources</a> for yum repo resources.</p>
</li></ul> </li></ul>
<h2 id="label-Deployment">Deployment</h2> <h2 id="label-Deployment">Deployment</h2>
@@ -107,14 +105,14 @@
<p>via site.pp or nodes.pp</p> <p>via site.pp or nodes.pp</p>
<pre class="code ruby"><code class="ruby">node &#39;example.example.net&#39; { <pre class="code ruby"><code class="ruby">node &#39;example.example.net&#39; {
include cd_selinux include confdroid_selinux
} }
</code></pre> </code></pre>
<ul><li> <ul><li>
<p>through Foreman:</p> <p>through Foreman:</p>
</li></ul> </li></ul>
<p>In order to apply parameters through Foreman, <strong>cd_selinux::params</strong> must be added to the host or host group in question.</p> <p>In order to apply parameters through Foreman, *<em>confdroid_selinux::params</em>- must be added to the host or host group in question.</p>
<p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p> <p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p>
@@ -124,14 +122,14 @@
<h2 id="label-Known+Problems">Known Problems</h2> <h2 id="label-Known+Problems">Known Problems</h2>
<ul><li> <ul><li>
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong> do the reboot for you to avoid unexpected outages.</p> <p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong>- do the reboot for you to avoid unexpected outages.</p>
</li></ul> </li></ul>
<h2 id="label-Support">Support</h2> <h2 id="label-Support">Support</h2>
<ul><li> <ul><li>
<p>OS: CentOS 7</p> <p>OS: Rocky 9 (any RHEL9-based OS should work, but Rocky has been tested)</p>
</li><li> </li><li>
<p>Puppet 5,6</p> <p>Puppet 8</p>
</li></ul> </li></ul>
<h2 id="label-Tests">Tests</h2> <h2 id="label-Tests">Tests</h2>
@@ -151,8 +149,11 @@
</li></ul> </li></ul>
<h2 id="label-Contact+Us">Contact Us</h2> <h2 id="label-Contact+Us">Contact Us</h2>
<ul><li>
<p><a href="https://confdroid.com/contact/">contact Us</a></p> <p><a href="https://confdroid.com/contact/">contact Us</a></p>
</li><li>
<p><a href="https://feedback.confdroid.com/">Feedback Portal</a></p>
</li></ul>
<h2 id="label-Disclaimer">Disclaimer</h2> <h2 id="label-Disclaimer">Disclaimer</h2>

View File

@@ -36,44 +36,44 @@
<ul id="full_list" class="puppet_class"> <ul id="full_list" class="puppet_class">
<li id="object_puppet_classes::cd_selinux" class="odd"> <li id="object_puppet_classes::confdroid_selinux" class="odd">
<div class="item"> <div class="item">
<span class='object_link'><a href="puppet_classes/cd_selinux.html" title="puppet_classes::cd_selinux (puppet_class)">cd_selinux</a></span> <span class='object_link'><a href="puppet_classes/confdroid_selinux.html" title="puppet_classes::confdroid_selinux (puppet_class)">confdroid_selinux</a></span>
</div> </div>
</li> </li>
<li id="object_puppet_classes::cd_selinux::main::config" class="even"> <li id="object_puppet_classes::confdroid_selinux::main::config" class="even">
<div class="item"> <div class="item">
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::cd_selinux::main::config (puppet_class)">cd_selinux::main::config</a></span> <span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_selinux::main::config (puppet_class)">confdroid_selinux::main::config</a></span>
</div> </div>
</li> </li>
<li id="object_puppet_classes::cd_selinux::main::dirs" class="odd"> <li id="object_puppet_classes::confdroid_selinux::main::dirs" class="odd">
<div class="item"> <div class="item">
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::cd_selinux::main::dirs (puppet_class)">cd_selinux::main::dirs</a></span> <span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::confdroid_selinux::main::dirs (puppet_class)">confdroid_selinux::main::dirs</a></span>
</div> </div>
</li> </li>
<li id="object_puppet_classes::cd_selinux::main::files" class="even"> <li id="object_puppet_classes::confdroid_selinux::main::files" class="even">
<div class="item"> <div class="item">
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::cd_selinux::main::files (puppet_class)">cd_selinux::main::files</a></span> <span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::confdroid_selinux::main::files (puppet_class)">confdroid_selinux::main::files</a></span>
</div> </div>
</li> </li>
<li id="object_puppet_classes::cd_selinux::main::install" class="odd"> <li id="object_puppet_classes::confdroid_selinux::main::install" class="odd">
<div class="item"> <div class="item">
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::cd_selinux::main::install (puppet_class)">cd_selinux::main::install</a></span> <span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_selinux::main::install (puppet_class)">confdroid_selinux::main::install</a></span>
</div> </div>
</li> </li>
<li id="object_puppet_classes::cd_selinux::params" class="even"> <li id="object_puppet_classes::confdroid_selinux::params" class="even">
<div class="item"> <div class="item">
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span> <span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span>
</div> </div>
</li> </li>

View File

@@ -4,7 +4,7 @@
<meta charset="utf-8"> <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<title> <title>
Puppet Class: cd_selinux Puppet Class: confdroid_selinux
&mdash; Documentation by YARD 0.9.36 &mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" /> <link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript"> <script type="text/javascript">
pathId = "puppet_classes::cd_selinux"; pathId = "puppet_classes::confdroid_selinux";
relpath = '../'; relpath = '../';
</script> </script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo; <a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span> <span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo; &raquo;
<span class="title">cd_selinux</span> <span class="title">confdroid_selinux</span>
</div> </div>
@@ -59,7 +59,7 @@
<div class="clear"></div> <div class="clear"></div>
</div> </div>
<div id="content"><h1>Puppet Class: cd_selinux</h1> <div id="content"><h1>Puppet Class: confdroid_selinux</h1>
<div class="box_info"> <div class="box_info">
@@ -72,13 +72,13 @@
</div> </div>
<h2>Summary</h2> <h2>Summary</h2>
Class initializes the cd_selinux Module. Class initializes the confdroid_selinux Module.
<h2>Overview</h2> <h2>Overview</h2>
<div class="docstring"> <div class="docstring">
<div class="discussion"> <div class="discussion">
<p>cd_selinux::init.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@confdroid.com)</p> <p>confdroid_selinux::init.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@confdroid.com)</p>
</div> </div>
</div> </div>
@@ -103,8 +103,8 @@
<td> <td>
<pre class="code"><span class="info file"># File 'manifests/init.pp', line 6</span> <pre class="code"><span class="info file"># File 'manifests/init.pp', line 6</span>
class cd_selinux { class confdroid_selinux {
include cd_selinux::params include confdroid_selinux::params
}</pre> }</pre>
</td> </td>
</tr> </tr>

View File

@@ -4,7 +4,7 @@
<meta charset="utf-8"> <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<title> <title>
Puppet Class: cd_selinux::main::config Puppet Class: confdroid_selinux::main::config
&mdash; Documentation by YARD 0.9.36 &mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" /> <link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript"> <script type="text/javascript">
pathId = "puppet_classes::cd_selinux::main::config"; pathId = "puppet_classes::confdroid_selinux::main::config";
relpath = '../'; relpath = '../';
</script> </script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo; <a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span> <span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo; &raquo;
<span class="title">cd_selinux::main::config</span> <span class="title">confdroid_selinux::main::config</span>
</div> </div>
@@ -59,12 +59,12 @@
<div class="clear"></div> <div class="clear"></div>
</div> </div>
<div id="content"><h1>Puppet Class: cd_selinux::main::config</h1> <div id="content"><h1>Puppet Class: confdroid_selinux::main::config</h1>
<div class="box_info"> <div class="box_info">
<dl> <dl>
<dt>Inherits:</dt> <dt>Inherits:</dt>
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd> <dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
</dl> </dl>
@@ -77,13 +77,13 @@
</div> </div>
<h2>Summary</h2> <h2>Summary</h2>
Class manages the module logic for cd_selinux. Class manages the module logic for confdroid_selinux.
<h2>Overview</h2> <h2>Overview</h2>
<div class="docstring"> <div class="docstring">
<div class="discussion"> <div class="discussion">
<p>cd_selinux::main::config.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p> <p>confdroid_selinux::main::config.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
</div> </div>
</div> </div>
@@ -119,17 +119,17 @@
<td> <td>
<pre class="code"><span class="info file"># File 'manifests/main/config.pp', line 6</span> <pre class="code"><span class="info file"># File 'manifests/main/config.pp', line 6</span>
class cd_selinux::main::config ( class confdroid_selinux::main::config (
) inherits cd_selinux::params { ) inherits confdroid_selinux::params {
include cd_selinux::main::files include confdroid_selinux::main::files
if $sx_selinux_status == &#39;enforcing&#39; { if $sx_selinux_status == &#39;enforcing&#39; {
exec { &#39;set_selinux_status&#39;: exec { &#39;set_selinux_status&#39;:
command =&gt; &#39;setenforce 1&#39;, command =&gt; &#39;setenforce 1&#39;,
path =&gt; [&#39;/usr/sbin&#39;,&#39;/usr/bin&#39;], path =&gt; [&#39;/usr/sbin&#39;,&#39;/usr/bin&#39;],
provider =&gt; shell, provider =&gt; shell,
unless =&gt; &#39;getenforce | grep -i &quot;enforcing&quot;&#39; unless =&gt; &#39;getenforce | grep -i &quot;enforcing&quot;&#39;,
} }
} }
}</pre> }</pre>

View File

@@ -4,7 +4,7 @@
<meta charset="utf-8"> <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<title> <title>
Puppet Class: cd_selinux::main::dirs Puppet Class: confdroid_selinux::main::dirs
&mdash; Documentation by YARD 0.9.36 &mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" /> <link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript"> <script type="text/javascript">
pathId = "puppet_classes::cd_selinux::main::dirs"; pathId = "puppet_classes::confdroid_selinux::main::dirs";
relpath = '../'; relpath = '../';
</script> </script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo; <a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span> <span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo; &raquo;
<span class="title">cd_selinux::main::dirs</span> <span class="title">confdroid_selinux::main::dirs</span>
</div> </div>
@@ -59,12 +59,12 @@
<div class="clear"></div> <div class="clear"></div>
</div> </div>
<div id="content"><h1>Puppet Class: cd_selinux::main::dirs</h1> <div id="content"><h1>Puppet Class: confdroid_selinux::main::dirs</h1>
<div class="box_info"> <div class="box_info">
<dl> <dl>
<dt>Inherits:</dt> <dt>Inherits:</dt>
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd> <dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
</dl> </dl>
@@ -77,13 +77,13 @@
</div> </div>
<h2>Summary</h2> <h2>Summary</h2>
Class manages all directories required for cd_selinux. Class manages all directories required for confdroid_selinux.
<h2>Overview</h2> <h2>Overview</h2>
<div class="docstring"> <div class="docstring">
<div class="discussion"> <div class="discussion">
<p>cd_selinux::main::dirs.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p> <p>confdroid_selinux::main::dirs.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
</div> </div>
</div> </div>
@@ -122,10 +122,10 @@
<td> <td>
<pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 6</span> <pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 6</span>
class cd_selinux::main::dirs ( class confdroid_selinux::main::dirs (
) inherits cd_selinux::params { ) inherits confdroid_selinux::params {
require cd_selinux::main::install require confdroid_selinux::main::install
file { $sx_main_dir: file { $sx_main_dir:
ensure =&gt; directory, ensure =&gt; directory,

View File

@@ -4,7 +4,7 @@
<meta charset="utf-8"> <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<title> <title>
Puppet Class: cd_selinux::main::files Puppet Class: confdroid_selinux::main::files
&mdash; Documentation by YARD 0.9.36 &mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" /> <link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript"> <script type="text/javascript">
pathId = "puppet_classes::cd_selinux::main::files"; pathId = "puppet_classes::confdroid_selinux::main::files";
relpath = '../'; relpath = '../';
</script> </script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo; <a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span> <span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo; &raquo;
<span class="title">cd_selinux::main::files</span> <span class="title">confdroid_selinux::main::files</span>
</div> </div>
@@ -59,12 +59,12 @@
<div class="clear"></div> <div class="clear"></div>
</div> </div>
<div id="content"><h1>Puppet Class: cd_selinux::main::files</h1> <div id="content"><h1>Puppet Class: confdroid_selinux::main::files</h1>
<div class="box_info"> <div class="box_info">
<dl> <dl>
<dt>Inherits:</dt> <dt>Inherits:</dt>
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd> <dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
</dl> </dl>
@@ -77,13 +77,13 @@
</div> </div>
<h2>Summary</h2> <h2>Summary</h2>
Class manages all configuration files required for cd_selinux. Class manages all configuration files required for confdroid_selinux.
<h2>Overview</h2> <h2>Overview</h2>
<div class="docstring"> <div class="docstring">
<div class="discussion"> <div class="discussion">
<p>cd_selinux::main::files.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p> <p>confdroid_selinux::main::files.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
</div> </div>
</div> </div>
@@ -123,10 +123,10 @@
<td> <td>
<pre class="code"><span class="info file"># File 'manifests/main/files.pp', line 6</span> <pre class="code"><span class="info file"># File 'manifests/main/files.pp', line 6</span>
class cd_selinux::main::files ( class confdroid_selinux::main::files (
) inherits cd_selinux::params { ) inherits confdroid_selinux::params {
require cd_selinux::main::dirs require confdroid_selinux::main::dirs
file { $sx_main_file: file { $sx_main_file:
ensure =&gt; file, ensure =&gt; file,

View File

@@ -4,7 +4,7 @@
<meta charset="utf-8"> <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<title> <title>
Puppet Class: cd_selinux::main::install Puppet Class: confdroid_selinux::main::install
&mdash; Documentation by YARD 0.9.36 &mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" /> <link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript"> <script type="text/javascript">
pathId = "puppet_classes::cd_selinux::main::install"; pathId = "puppet_classes::confdroid_selinux::main::install";
relpath = '../'; relpath = '../';
</script> </script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo; <a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span> <span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo; &raquo;
<span class="title">cd_selinux::main::install</span> <span class="title">confdroid_selinux::main::install</span>
</div> </div>
@@ -59,12 +59,12 @@
<div class="clear"></div> <div class="clear"></div>
</div> </div>
<div id="content"><h1>Puppet Class: cd_selinux::main::install</h1> <div id="content"><h1>Puppet Class: confdroid_selinux::main::install</h1>
<div class="box_info"> <div class="box_info">
<dl> <dl>
<dt>Inherits:</dt> <dt>Inherits:</dt>
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd> <dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
</dl> </dl>
@@ -78,13 +78,13 @@
<h2>Summary</h2> <h2>Summary</h2>
Class manage all aspects of installing binaries required for Class manage all aspects of installing binaries required for
cd_selinux confdroid_selinux
<h2>Overview</h2> <h2>Overview</h2>
<div class="docstring"> <div class="docstring">
<div class="discussion"> <div class="discussion">
<p>cd_selinux::main::install.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p> <p>confdroid_selinux::main::install.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
</div> </div>
</div> </div>
@@ -110,30 +110,18 @@ cd_selinux
12 12
13 13
14 14
15 15</pre>
16
17
18
19
20
21</pre>
</td> </td>
<td> <td>
<pre class="code"><span class="info file"># File 'manifests/main/install.pp', line 7</span> <pre class="code"><span class="info file"># File 'manifests/main/install.pp', line 7</span>
class cd_selinux::main::install ( class confdroid_selinux::main::install (
) inherits cd_selinux::params { ) inherits confdroid_selinux::params {
require cd_resources require confdroid_resources
package { $reqpackages_main: package { $sx_reqpackages:
ensure =&gt; $pkg_ensure, ensure =&gt; $sx_pkg_ensure,
}
if $sx_install_setools == true {
package { $reqpackages_tools:
ensure =&gt; $pkg_ensure,
}
} }
}</pre> }</pre>
</td> </td>

View File

@@ -4,7 +4,7 @@
<meta charset="utf-8"> <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<title> <title>
Puppet Class: cd_selinux::params Puppet Class: confdroid_selinux::params
&mdash; Documentation by YARD 0.9.36 &mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" /> <link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript"> <script type="text/javascript">
pathId = "puppet_classes::cd_selinux::params"; pathId = "puppet_classes::confdroid_selinux::params";
relpath = '../'; relpath = '../';
</script> </script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo; <a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span> <span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo; &raquo;
<span class="title">cd_selinux::params</span> <span class="title">confdroid_selinux::params</span>
</div> </div>
@@ -59,7 +59,7 @@
<div class="clear"></div> <div class="clear"></div>
</div> </div>
<div id="content"><h1>Puppet Class: cd_selinux::params</h1> <div id="content"><h1>Puppet Class: confdroid_selinux::params</h1>
<div class="box_info"> <div class="box_info">
@@ -67,13 +67,13 @@
<dt>Inherited by:</dt> <dt>Inherited by:</dt>
<dd> <dd>
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::cd_selinux::main::dirs (puppet_class)">cd_selinux::main::dirs</a></span><br/> <span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::confdroid_selinux::main::dirs (puppet_class)">confdroid_selinux::main::dirs</a></span><br/>
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::cd_selinux::main::files (puppet_class)">cd_selinux::main::files</a></span><br/> <span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::confdroid_selinux::main::files (puppet_class)">confdroid_selinux::main::files</a></span><br/>
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::cd_selinux::main::config (puppet_class)">cd_selinux::main::config</a></span><br/> <span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_selinux::main::config (puppet_class)">confdroid_selinux::main::config</a></span><br/>
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::cd_selinux::main::install (puppet_class)">cd_selinux::main::install</a></span><br/> <span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_selinux::main::install (puppet_class)">confdroid_selinux::main::install</a></span><br/>
</dd> </dd>
</dl> </dl>
@@ -87,14 +87,14 @@
</div> </div>
<h2>Summary</h2> <h2>Summary</h2>
Class holds all parameters for the cd_selinux module and is Class holds all parameters for the confdroid_selinux module and is
inherited by all classes except defines. inherited by all classes except defines.
<h2>Overview</h2> <h2>Overview</h2>
<div class="docstring"> <div class="docstring">
<div class="discussion"> <div class="discussion">
<p>cd_selinux::params.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p> <p>confdroid_selinux::params.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
</div> </div>
</div> </div>
@@ -107,7 +107,7 @@ inherited by all classes except defines.
<li> <li>
<span class='name'>pkg_ensure</span> <span class='name'>sx_pkg_ensure</span>
<span class='type'>(<tt>String</tt>)</span> <span class='type'>(<tt>String</tt>)</span>
@@ -125,18 +125,18 @@ inherited by all classes except defines.
<li> <li>
<span class='name'>sx_install_setools</span> <span class='name'>sx_reqpackages</span>
<span class='type'>(<tt>Boolean</tt>)</span> <span class='type'>(<tt>Array[String]</tt>)</span>
<em class="default">(defaults to: <tt>false</tt>)</em> <em class="default">(defaults to: <tt>[&#39;selinux-policy&#39;,&#39;policycoreutils&#39;,&#39;setroubleshoot-server&#39;,&#39;policycoreutils-python-utils&#39;]</tt>)</em>
&mdash; &mdash;
<div class='inline'> <div class='inline'>
<p>Whether to install additional selinux tools, i.e. for troubleshooting.</p> <p>List of packages required for selinux management. The default list includes the following packages: <code>selinux-policy</code>, <code>policycoreutils</code>, <code>setroubleshoot-server</code>, <code>policycoreutils-python</code>.</p>
</div> </div>
</li> </li>
@@ -188,8 +188,6 @@ inherited by all classes except defines.
<pre class="lines"> <pre class="lines">
21
22
23 23
24 24
25 25
@@ -214,39 +212,35 @@ inherited by all classes except defines.
44 44
45 45
46 46
47 47</pre>
48</pre>
</td> </td>
<td> <td>
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 21</span> <pre class="code"><span class="info file"># File 'manifests/params.pp', line 23</span>
class cd_selinux::params ( class confdroid_selinux::params (
String $pkg_ensure = &#39;latest&#39;, Array[String] $sx_reqpackages = [&#39;selinux-policy&#39;,&#39;policycoreutils&#39;,&#39;setroubleshoot-server&#39;,&#39;policycoreutils-python-utils&#39;],
String $sx_pkg_ensure = &#39;latest&#39;,
Boolean $sx_install_setools = false,
String $sx_selinux_status = &#39;enforcing&#39;, String $sx_selinux_status = &#39;enforcing&#39;,
String $sx_selinux_type = &#39;targeted&#39;, String $sx_selinux_type = &#39;targeted&#39;,
) { ) {
# installation section # default facts
$reqpackages_main = $::operatingsystem ? { $fqdn = $facts[&#39;networking&#39;][&#39;fqdn&#39;]
/(?i-mx:centos|fedora|redhat)/ =&gt; [&#39;selinux-policy&#39;,&#39;policycoreutils&#39;], $hostname = $facts[&#39;networking&#39;][&#39;hostname&#39;]
} $domain = $facts[&#39;networking&#39;][&#39;domain&#39;]
$os_name = $facts[&#39;os&#39;][&#39;name&#39;]
$reqpackages_tools = $::operatingsystem ? { $os_release = $facts[&#39;os&#39;][&#39;release&#39;][&#39;major&#39;]
/(?i-mx:centos|fedora|redhat)/ =&gt; [&#39;setroubleshoot-server&#39;,&#39;policycoreutils-python&#39;],
}
# directories # directories
$sx_main_dir = &#39;/etc/selinux&#39; $sx_main_dir = &#39;/etc/selinux&#39;
# files # files
$sx_main_file = &quot;${sx_main_dir}/config&quot; $sx_main_file = &quot;${sx_main_dir}/config&quot;
$sx_main_file_erb = &#39;cd_selinux/main/selinux_config.erb&#39; $sx_main_file_erb = &#39;confdroid_selinux/main/selinux_config.erb&#39;
# includes must be last # includes must be last
include cd_selinux::main::config include confdroid_selinux::main::config
}</pre> }</pre>
</td> </td>
</tr> </tr>

View File

@@ -1,8 +1,8 @@
## cd_selinux::init.pp ## confdroid_selinux::init.pp
# Module name: cd_selinux # Module name: confdroid_selinux
# Author: Arne Teuke (arne_teuke@confdroid.com) # Author: 12ww1160 (12ww1160@confdroid.com)
# @summary Class initializes the cd_selinux Module. # @summary Class initializes the confdroid_selinux Module.
############################################################################## ##############################################################################
class cd_selinux { class confdroid_selinux {
include cd_selinux::params include confdroid_selinux::params
} }

View File

@@ -1,19 +1,19 @@
## cd_selinux::main::config.pp ## confdroid_selinux::main::config.pp
# Module name: cd_selinux # Module name: confdroid_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com) # Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary Class manages the module logic for cd_selinux. # @summary Class manages the module logic for confdroid_selinux.
############################################################################## ##############################################################################
class cd_selinux::main::config ( class confdroid_selinux::main::config (
) inherits cd_selinux::params { ) inherits confdroid_selinux::params {
include cd_selinux::main::files include confdroid_selinux::main::files
if $sx_selinux_status == 'enforcing' { if $sx_selinux_status == 'enforcing' {
exec { 'set_selinux_status': exec { 'set_selinux_status':
command => 'setenforce 1', command => 'setenforce 1',
path => ['/usr/sbin','/usr/bin'], path => ['/usr/sbin','/usr/bin'],
provider => shell, provider => shell,
unless => 'getenforce | grep -i "enforcing"' unless => 'getenforce | grep -i "enforcing"',
} }
} }
} }

View File

@@ -1,12 +1,12 @@
## cd_selinux::main::dirs.pp ## confdroid_selinux::main::dirs.pp
# Module name: cd_selinux # Module name: confdroid_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com) # Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary Class manages all directories required for cd_selinux. # @summary Class manages all directories required for confdroid_selinux.
############################################################################### ###############################################################################
class cd_selinux::main::dirs ( class confdroid_selinux::main::dirs (
) inherits cd_selinux::params { ) inherits confdroid_selinux::params {
require cd_selinux::main::install require confdroid_selinux::main::install
file { $sx_main_dir: file { $sx_main_dir:
ensure => directory, ensure => directory,

View File

@@ -1,12 +1,12 @@
## cd_selinux::main::files.pp ## confdroid_selinux::main::files.pp
# Module name: cd_selinux # Module name: confdroid_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com) # Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary Class manages all configuration files required for cd_selinux. # @summary Class manages all configuration files required for confdroid_selinux.
############################################################################## ##############################################################################
class cd_selinux::main::files ( class confdroid_selinux::main::files (
) inherits cd_selinux::params { ) inherits confdroid_selinux::params {
require cd_selinux::main::dirs require confdroid_selinux::main::dirs
file { $sx_main_file: file { $sx_main_file:
ensure => file, ensure => file,

View File

@@ -1,21 +1,15 @@
## cd_selinux::main::install.pp ## confdroid_selinux::main::install.pp
# Module name: cd_selinux # Module name: confdroid_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com) # Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary Class manage all aspects of installing binaries required for # @summary Class manage all aspects of installing binaries required for
# cd_selinux # confdroid_selinux
############################################################################### ###############################################################################
class cd_selinux::main::install ( class confdroid_selinux::main::install (
) inherits cd_selinux::params { ) inherits confdroid_selinux::params {
require cd_resources require confdroid_resources
package { $reqpackages_main: package { $sx_reqpackages:
ensure => $pkg_ensure, ensure => $sx_pkg_ensure,
}
if $sx_install_setools == true {
package { $reqpackages_tools:
ensure => $pkg_ensure,
}
} }
} }

View File

@@ -1,13 +1,15 @@
## cd_selinux::params.pp ## confdroid_selinux::params.pp
# Module name: cd_selinux # Module name: confdroid_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com) # Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary Class holds all parameters for the cd_selinux module and is # @summary Class holds all parameters for the confdroid_selinux module and is
# inherited by all classes except defines. # inherited by all classes except defines.
# @param [String] pkg_ensure # @param [String] sx_pkg_ensure
# which [package type](https://confdroid.com/2017/05/puppet-type-package/) # which [package type](https://confdroid.com/2017/05/puppet-type-package/)
# to choose, i.e. `latest` or `present`. # to choose, i.e. `latest` or `present`.
# @param [Boolean] sx_install_setools Whether to install additional selinux # @param [Array[String]] sx_reqpackages
# tools, i.e. for troubleshooting. # List of packages required for selinux management. The default list includes
# the following packages: `selinux-policy`, `policycoreutils`,
# `setroubleshoot-server`, `policycoreutils-python`.
# @param [String] sx_selinux_status The desired selinux status. Used for both # @param [String] sx_selinux_status The desired selinux status. Used for both
# managing the configuration file as well as the command line (setenforce). # managing the configuration file as well as the command line (setenforce).
# Valid values are `enforcing` and `permissive`. While the configuration file # Valid values are `enforcing` and `permissive`. While the configuration file
@@ -18,31 +20,28 @@
# @param [String] sx_selinux_type The desired selinux type. Valid options are # @param [String] sx_selinux_type The desired selinux type. Valid options are
# `targeted`, `minimum` and `mls`. # `targeted`, `minimum` and `mls`.
############################################################################## ##############################################################################
class cd_selinux::params ( class confdroid_selinux::params (
String $pkg_ensure = 'latest', Array[String] $sx_reqpackages = ['selinux-policy','policycoreutils','setroubleshoot-server','policycoreutils-python-utils'],
String $sx_pkg_ensure = 'latest',
Boolean $sx_install_setools = false,
String $sx_selinux_status = 'enforcing', String $sx_selinux_status = 'enforcing',
String $sx_selinux_type = 'targeted', String $sx_selinux_type = 'targeted',
) { ) {
# installation section # default facts
$reqpackages_main = $::operatingsystem ? { $fqdn = $facts['networking']['fqdn']
/(?i-mx:centos|fedora|redhat)/ => ['selinux-policy','policycoreutils'], $hostname = $facts['networking']['hostname']
} $domain = $facts['networking']['domain']
$os_name = $facts['os']['name']
$reqpackages_tools = $::operatingsystem ? { $os_release = $facts['os']['release']['major']
/(?i-mx:centos|fedora|redhat)/ => ['setroubleshoot-server','policycoreutils-python'],
}
# directories # directories
$sx_main_dir = '/etc/selinux' $sx_main_dir = '/etc/selinux'
# files # files
$sx_main_file = "${sx_main_dir}/config" $sx_main_file = "${sx_main_dir}/config"
$sx_main_file_erb = 'cd_selinux/main/selinux_config.erb' $sx_main_file_erb = 'confdroid_selinux/main/selinux_config.erb'
# includes must be last # includes must be last
include cd_selinux::main::config include confdroid_selinux::main::config
} }

View File

@@ -1,6 +1,7 @@
################################################################################ ################################################################################
########## /etc/selinux/config managed by Puppet ########## ########## /etc/selinux/config managed by Puppet ##########
########## manual changes will be overwritten !!! ########## ########## manual changes will be overwritten !!! ##########
########## original file: https://3for.me/wdtuj ##########
################################################################################ ################################################################################
SELINUX=<%= @sx_selinux_status %> SELINUX=<%= @sx_selinux_status %>