Compare commits
29 Commits
3f880a412a
...
master
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
fd61b6adf8 | ||
|
|
0584cedaa6 | ||
|
|
f0696c8855 | ||
| 054a912251 | |||
|
|
de87db9463 | ||
|
|
417df9a5a9 | ||
|
|
2cafa1f21a | ||
| b766962f39 | |||
| dc4f967292 | |||
|
|
2e2287d340 | ||
|
|
1b68d737ea | ||
| b949a0a661 | |||
|
|
d7711096f5 | ||
|
|
69c2aa17d0 | ||
| e307d7a02e | |||
|
|
17c5c0485b | ||
|
|
d7a244b217 | ||
| a5e4dc02ba | |||
|
|
2557193779 | ||
|
|
994f2ad8e2 | ||
| 1aae89edca | |||
|
|
18808850c6 | ||
|
|
d0bc29f161 | ||
| 5c2a2e215c | |||
| 34877c45c8 | |||
|
|
19c4f9d973 | ||
| 6b55c6afbe | |||
| 88494b74de | |||
|
|
df53e0ccab |
1
.gitignore
vendored
1
.gitignore
vendored
@@ -2,3 +2,4 @@
|
|||||||
Gemfile.lock
|
Gemfile.lock
|
||||||
FileList
|
FileList
|
||||||
.scannerwork
|
.scannerwork
|
||||||
|
.vscode
|
||||||
3
.puppet-lint.rc
Normal file
3
.puppet-lint.rc
Normal file
@@ -0,0 +1,3 @@
|
|||||||
|
--no-variable_scope-check
|
||||||
|
--no-top_scope_facts
|
||||||
|
--no-140chars-check
|
||||||
44
README.md
44
README.md
@@ -1,14 +1,13 @@
|
|||||||
# Readme
|
# Readme
|
||||||
|
|
||||||
[](https://jenkins.confdroid.com/job/cd_selinux/)
|
[](https://jenkins.confdroid.com/job/confdroid_selinux/)
|
||||||
|
[](https://sonarqube.confdroid.com/dashboard?id=confdroid_selinux)
|
||||||
[[_TOC_]]
|
|
||||||
|
|
||||||
## Synopsis
|
## Synopsis
|
||||||
|
|
||||||
[Security-Enhanced Linux (SELinux)](https://en.wikipedia.org/wiki/Security-Enhanced_Linux) is a Linux kernel security module that provides a mechanism for supporting access control security policies.
|
[Security-Enhanced Linux (SELinux)](https://en.wikipedia.org/wiki/Security-Enhanced_Linux) is a Linux kernel security module that provides a mechanism for supporting access control security policies.
|
||||||
|
|
||||||
`cd_selinux` is a Puppet module to automate installation, configuration and troubleshooting of selinux.
|
`confdroid_selinux` is a Puppet module to automate installation, configuration and troubleshooting of selinux.
|
||||||
|
|
||||||
## WARNING
|
## WARNING
|
||||||
|
|
||||||
@@ -18,12 +17,12 @@
|
|||||||
|
|
||||||
Installation:
|
Installation:
|
||||||
|
|
||||||
* install binaries required for selinux and related tools
|
- install binaries required for selinux and related tools
|
||||||
|
|
||||||
Configuration
|
Configuration
|
||||||
|
|
||||||
* manage `/etc/sysconfig/selinux` file (file system permissions, selinux context, content)
|
- manage `/etc/sysconfig/selinux` file (file system permissions, selinux context, content)
|
||||||
* manage current selinux status (permissive,enforcing)
|
- manage current selinux status (permissive,enforcing)
|
||||||
|
|
||||||
## Repo Documentation
|
## Repo Documentation
|
||||||
|
|
||||||
@@ -33,23 +32,23 @@ See the full Puppet documentation including parameters in `docs/index.html`.
|
|||||||
|
|
||||||
All dependencies must be included in the catalogue.
|
All dependencies must be included in the catalogue.
|
||||||
|
|
||||||
* [cd_resources](https://gitlab.confdroid.com/puppet/cd_resources) for yum repo resources.
|
- [confdroid_resources](https://sourcecode.confdroid.com/confdroid/confdroid_resources) for yum repo resources.
|
||||||
|
|
||||||
## Deployment
|
## Deployment
|
||||||
|
|
||||||
* native Puppet deployment
|
- native Puppet deployment
|
||||||
|
|
||||||
via site.pp or nodes.pp
|
via site.pp or nodes.pp
|
||||||
|
|
||||||
```ruby
|
```ruby
|
||||||
node 'example.example.net' {
|
node 'example.example.net' {
|
||||||
include cd_selinux
|
include confdroid_selinux
|
||||||
}
|
}
|
||||||
```
|
```
|
||||||
|
|
||||||
* through Foreman:
|
- through Foreman:
|
||||||
|
|
||||||
In order to apply parameters through Foreman, **__cd_selinux::params__** must be added to the host or host group in question.
|
In order to apply parameters through Foreman, **confdroid_selinux::params*- must be added to the host or host group in question.
|
||||||
|
|
||||||
See [more details about class deployment on Confdroid.com](https://confdroid.com/2017/05/deploying-our-puppet-modules/).
|
See [more details about class deployment on Confdroid.com](https://confdroid.com/2017/05/deploying-our-puppet-modules/).
|
||||||
|
|
||||||
@@ -59,25 +58,26 @@ All files and directories are configured with correct selinux context. If selinu
|
|||||||
|
|
||||||
## Known Problems
|
## Known Problems
|
||||||
|
|
||||||
* Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will **__not__** do the reboot for you to avoid unexpected outages.
|
- Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will **not**- do the reboot for you to avoid unexpected outages.
|
||||||
|
|
||||||
## Support
|
## Support
|
||||||
|
|
||||||
* OS: CentOS 7
|
- OS: Rocky 9 (any RHEL9-based OS should work, but Rocky has been tested)
|
||||||
* Puppet 5,6
|
- Puppet 8
|
||||||
|
|
||||||
## Tests
|
## Tests
|
||||||
|
|
||||||
* Puppet Lint
|
- Puppet Lint
|
||||||
* excluded tests:
|
- excluded tests:
|
||||||
* `--no-variable_scope-check`: not applicable as we are inheriting parameters from params class. the lint check does not distinguish between facts and inherited parameters.
|
- `--no-variable_scope-check`: not applicable as we are inheriting parameters from params class. the lint check does not distinguish between facts and inherited parameters.
|
||||||
* Puppet Parser
|
- Puppet Parser
|
||||||
* ERB Template Parser
|
- ERB Template Parser
|
||||||
* Sonar Quality Gate
|
- Sonar Quality Gate
|
||||||
|
|
||||||
## Contact Us
|
## Contact Us
|
||||||
|
|
||||||
[contact Us](https://confdroid.com/contact/)
|
- [contact Us](https://confdroid.com/contact/)
|
||||||
|
- [Feedback Portal](https://feedback.confdroid.com/)
|
||||||
|
|
||||||
## Disclaimer
|
## Disclaimer
|
||||||
|
|
||||||
|
|||||||
@@ -69,32 +69,32 @@
|
|||||||
<ul>
|
<ul>
|
||||||
|
|
||||||
<li>
|
<li>
|
||||||
<span class='object_link'><a href="puppet_classes/cd_selinux.html" title="puppet_classes::cd_selinux (puppet_class)">cd_selinux</a></span>
|
<span class='object_link'><a href="puppet_classes/confdroid_selinux.html" title="puppet_classes::confdroid_selinux (puppet_class)">confdroid_selinux</a></span>
|
||||||
|
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
<li>
|
<li>
|
||||||
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::cd_selinux::main::config (puppet_class)">cd_selinux::main::config</a></span>
|
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_selinux::main::config (puppet_class)">confdroid_selinux::main::config</a></span>
|
||||||
|
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
<li>
|
<li>
|
||||||
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::cd_selinux::main::dirs (puppet_class)">cd_selinux::main::dirs</a></span>
|
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::confdroid_selinux::main::dirs (puppet_class)">confdroid_selinux::main::dirs</a></span>
|
||||||
|
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
<li>
|
<li>
|
||||||
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::cd_selinux::main::files (puppet_class)">cd_selinux::main::files</a></span>
|
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::confdroid_selinux::main::files (puppet_class)">confdroid_selinux::main::files</a></span>
|
||||||
|
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
<li>
|
<li>
|
||||||
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::cd_selinux::main::install (puppet_class)">cd_selinux::main::install</a></span>
|
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_selinux::main::install (puppet_class)">confdroid_selinux::main::install</a></span>
|
||||||
|
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
<li>
|
<li>
|
||||||
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span>
|
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span>
|
||||||
|
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
|
|||||||
@@ -60,15 +60,13 @@
|
|||||||
<div id="content"><div id='filecontents'>
|
<div id="content"><div id='filecontents'>
|
||||||
<h1 id="label-Readme">Readme</h1>
|
<h1 id="label-Readme">Readme</h1>
|
||||||
|
|
||||||
<p><a href="https://jenkins.confdroid.com/job/cd_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=cd_selinux"></a></p>
|
<p><a href="https://jenkins.confdroid.com/job/confdroid_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=confdroid_selinux&style=plastic"></a> <a href="https://sonarqube.confdroid.com/dashboard?id=confdroid_selinux"><img src="https://sonarqube.confdroid.com/api/project_badges/measure?project=confdroid_selinux&metric=security_hotspots&token=sqb_cc73d9e100a7cda91c7f45b8a7690bd16498e852"></a></p>
|
||||||
|
|
||||||
<p>[[<em>TOC</em>]]</p>
|
|
||||||
|
|
||||||
<h2 id="label-Synopsis">Synopsis</h2>
|
<h2 id="label-Synopsis">Synopsis</h2>
|
||||||
|
|
||||||
<p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p>
|
<p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p>
|
||||||
|
|
||||||
<p><code>cd_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
|
<p><code>confdroid_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
|
||||||
|
|
||||||
<h2 id="label-WARNING">WARNING</h2>
|
<h2 id="label-WARNING">WARNING</h2>
|
||||||
|
|
||||||
@@ -96,7 +94,7 @@
|
|||||||
|
|
||||||
<p>All dependencies must be included in the catalogue.</p>
|
<p>All dependencies must be included in the catalogue.</p>
|
||||||
<ul><li>
|
<ul><li>
|
||||||
<p><a href="https://gitlab.confdroid.com/puppet/cd_resources">cd_resources</a> for yum repo resources.</p>
|
<p><a href="https://sourcecode.confdroid.com/confdroid/confdroid_resources">confdroid_resources</a> for yum repo resources.</p>
|
||||||
</li></ul>
|
</li></ul>
|
||||||
|
|
||||||
<h2 id="label-Deployment">Deployment</h2>
|
<h2 id="label-Deployment">Deployment</h2>
|
||||||
@@ -107,14 +105,14 @@
|
|||||||
<p>via site.pp or nodes.pp</p>
|
<p>via site.pp or nodes.pp</p>
|
||||||
|
|
||||||
<pre class="code ruby"><code class="ruby">node 'example.example.net' {
|
<pre class="code ruby"><code class="ruby">node 'example.example.net' {
|
||||||
include cd_selinux
|
include confdroid_selinux
|
||||||
}
|
}
|
||||||
</code></pre>
|
</code></pre>
|
||||||
<ul><li>
|
<ul><li>
|
||||||
<p>through Foreman:</p>
|
<p>through Foreman:</p>
|
||||||
</li></ul>
|
</li></ul>
|
||||||
|
|
||||||
<p>In order to apply parameters through Foreman, <strong>cd_selinux::params</strong> must be added to the host or host group in question.</p>
|
<p>In order to apply parameters through Foreman, *<em>confdroid_selinux::params</em>- must be added to the host or host group in question.</p>
|
||||||
|
|
||||||
<p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p>
|
<p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p>
|
||||||
|
|
||||||
@@ -124,14 +122,14 @@
|
|||||||
|
|
||||||
<h2 id="label-Known+Problems">Known Problems</h2>
|
<h2 id="label-Known+Problems">Known Problems</h2>
|
||||||
<ul><li>
|
<ul><li>
|
||||||
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong> do the reboot for you to avoid unexpected outages.</p>
|
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong>- do the reboot for you to avoid unexpected outages.</p>
|
||||||
</li></ul>
|
</li></ul>
|
||||||
|
|
||||||
<h2 id="label-Support">Support</h2>
|
<h2 id="label-Support">Support</h2>
|
||||||
<ul><li>
|
<ul><li>
|
||||||
<p>OS: CentOS 7</p>
|
<p>OS: Rocky 9 (any RHEL9-based OS should work, but Rocky has been tested)</p>
|
||||||
</li><li>
|
</li><li>
|
||||||
<p>Puppet 5,6</p>
|
<p>Puppet 8</p>
|
||||||
</li></ul>
|
</li></ul>
|
||||||
|
|
||||||
<h2 id="label-Tests">Tests</h2>
|
<h2 id="label-Tests">Tests</h2>
|
||||||
@@ -151,8 +149,11 @@
|
|||||||
</li></ul>
|
</li></ul>
|
||||||
|
|
||||||
<h2 id="label-Contact+Us">Contact Us</h2>
|
<h2 id="label-Contact+Us">Contact Us</h2>
|
||||||
|
<ul><li>
|
||||||
<p><a href="https://confdroid.com/contact/">contact Us</a></p>
|
<p><a href="https://confdroid.com/contact/">contact Us</a></p>
|
||||||
|
</li><li>
|
||||||
|
<p><a href="https://feedback.confdroid.com/">Feedback Portal</a></p>
|
||||||
|
</li></ul>
|
||||||
|
|
||||||
<h2 id="label-Disclaimer">Disclaimer</h2>
|
<h2 id="label-Disclaimer">Disclaimer</h2>
|
||||||
|
|
||||||
|
|||||||
@@ -60,15 +60,13 @@
|
|||||||
<div id="content"><div id='filecontents'>
|
<div id="content"><div id='filecontents'>
|
||||||
<h1 id="label-Readme">Readme</h1>
|
<h1 id="label-Readme">Readme</h1>
|
||||||
|
|
||||||
<p><a href="https://jenkins.confdroid.com/job/cd_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=cd_selinux"></a></p>
|
<p><a href="https://jenkins.confdroid.com/job/confdroid_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=confdroid_selinux&style=plastic"></a> <a href="https://sonarqube.confdroid.com/dashboard?id=confdroid_selinux"><img src="https://sonarqube.confdroid.com/api/project_badges/measure?project=confdroid_selinux&metric=security_hotspots&token=sqb_cc73d9e100a7cda91c7f45b8a7690bd16498e852"></a></p>
|
||||||
|
|
||||||
<p>[[<em>TOC</em>]]</p>
|
|
||||||
|
|
||||||
<h2 id="label-Synopsis">Synopsis</h2>
|
<h2 id="label-Synopsis">Synopsis</h2>
|
||||||
|
|
||||||
<p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p>
|
<p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p>
|
||||||
|
|
||||||
<p><code>cd_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
|
<p><code>confdroid_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
|
||||||
|
|
||||||
<h2 id="label-WARNING">WARNING</h2>
|
<h2 id="label-WARNING">WARNING</h2>
|
||||||
|
|
||||||
@@ -96,7 +94,7 @@
|
|||||||
|
|
||||||
<p>All dependencies must be included in the catalogue.</p>
|
<p>All dependencies must be included in the catalogue.</p>
|
||||||
<ul><li>
|
<ul><li>
|
||||||
<p><a href="https://gitlab.confdroid.com/puppet/cd_resources">cd_resources</a> for yum repo resources.</p>
|
<p><a href="https://sourcecode.confdroid.com/confdroid/confdroid_resources">confdroid_resources</a> for yum repo resources.</p>
|
||||||
</li></ul>
|
</li></ul>
|
||||||
|
|
||||||
<h2 id="label-Deployment">Deployment</h2>
|
<h2 id="label-Deployment">Deployment</h2>
|
||||||
@@ -107,14 +105,14 @@
|
|||||||
<p>via site.pp or nodes.pp</p>
|
<p>via site.pp or nodes.pp</p>
|
||||||
|
|
||||||
<pre class="code ruby"><code class="ruby">node 'example.example.net' {
|
<pre class="code ruby"><code class="ruby">node 'example.example.net' {
|
||||||
include cd_selinux
|
include confdroid_selinux
|
||||||
}
|
}
|
||||||
</code></pre>
|
</code></pre>
|
||||||
<ul><li>
|
<ul><li>
|
||||||
<p>through Foreman:</p>
|
<p>through Foreman:</p>
|
||||||
</li></ul>
|
</li></ul>
|
||||||
|
|
||||||
<p>In order to apply parameters through Foreman, <strong>cd_selinux::params</strong> must be added to the host or host group in question.</p>
|
<p>In order to apply parameters through Foreman, *<em>confdroid_selinux::params</em>- must be added to the host or host group in question.</p>
|
||||||
|
|
||||||
<p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p>
|
<p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p>
|
||||||
|
|
||||||
@@ -124,14 +122,14 @@
|
|||||||
|
|
||||||
<h2 id="label-Known+Problems">Known Problems</h2>
|
<h2 id="label-Known+Problems">Known Problems</h2>
|
||||||
<ul><li>
|
<ul><li>
|
||||||
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong> do the reboot for you to avoid unexpected outages.</p>
|
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong>- do the reboot for you to avoid unexpected outages.</p>
|
||||||
</li></ul>
|
</li></ul>
|
||||||
|
|
||||||
<h2 id="label-Support">Support</h2>
|
<h2 id="label-Support">Support</h2>
|
||||||
<ul><li>
|
<ul><li>
|
||||||
<p>OS: CentOS 7</p>
|
<p>OS: Rocky 9 (any RHEL9-based OS should work, but Rocky has been tested)</p>
|
||||||
</li><li>
|
</li><li>
|
||||||
<p>Puppet 5,6</p>
|
<p>Puppet 8</p>
|
||||||
</li></ul>
|
</li></ul>
|
||||||
|
|
||||||
<h2 id="label-Tests">Tests</h2>
|
<h2 id="label-Tests">Tests</h2>
|
||||||
@@ -151,8 +149,11 @@
|
|||||||
</li></ul>
|
</li></ul>
|
||||||
|
|
||||||
<h2 id="label-Contact+Us">Contact Us</h2>
|
<h2 id="label-Contact+Us">Contact Us</h2>
|
||||||
|
<ul><li>
|
||||||
<p><a href="https://confdroid.com/contact/">contact Us</a></p>
|
<p><a href="https://confdroid.com/contact/">contact Us</a></p>
|
||||||
|
</li><li>
|
||||||
|
<p><a href="https://feedback.confdroid.com/">Feedback Portal</a></p>
|
||||||
|
</li></ul>
|
||||||
|
|
||||||
<h2 id="label-Disclaimer">Disclaimer</h2>
|
<h2 id="label-Disclaimer">Disclaimer</h2>
|
||||||
|
|
||||||
|
|||||||
@@ -36,44 +36,44 @@
|
|||||||
<ul id="full_list" class="puppet_class">
|
<ul id="full_list" class="puppet_class">
|
||||||
|
|
||||||
|
|
||||||
<li id="object_puppet_classes::cd_selinux" class="odd">
|
<li id="object_puppet_classes::confdroid_selinux" class="odd">
|
||||||
<div class="item">
|
<div class="item">
|
||||||
<span class='object_link'><a href="puppet_classes/cd_selinux.html" title="puppet_classes::cd_selinux (puppet_class)">cd_selinux</a></span>
|
<span class='object_link'><a href="puppet_classes/confdroid_selinux.html" title="puppet_classes::confdroid_selinux (puppet_class)">confdroid_selinux</a></span>
|
||||||
</div>
|
</div>
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
|
|
||||||
<li id="object_puppet_classes::cd_selinux::main::config" class="even">
|
<li id="object_puppet_classes::confdroid_selinux::main::config" class="even">
|
||||||
<div class="item">
|
<div class="item">
|
||||||
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::cd_selinux::main::config (puppet_class)">cd_selinux::main::config</a></span>
|
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_selinux::main::config (puppet_class)">confdroid_selinux::main::config</a></span>
|
||||||
</div>
|
</div>
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
|
|
||||||
<li id="object_puppet_classes::cd_selinux::main::dirs" class="odd">
|
<li id="object_puppet_classes::confdroid_selinux::main::dirs" class="odd">
|
||||||
<div class="item">
|
<div class="item">
|
||||||
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::cd_selinux::main::dirs (puppet_class)">cd_selinux::main::dirs</a></span>
|
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::confdroid_selinux::main::dirs (puppet_class)">confdroid_selinux::main::dirs</a></span>
|
||||||
</div>
|
</div>
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
|
|
||||||
<li id="object_puppet_classes::cd_selinux::main::files" class="even">
|
<li id="object_puppet_classes::confdroid_selinux::main::files" class="even">
|
||||||
<div class="item">
|
<div class="item">
|
||||||
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::cd_selinux::main::files (puppet_class)">cd_selinux::main::files</a></span>
|
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::confdroid_selinux::main::files (puppet_class)">confdroid_selinux::main::files</a></span>
|
||||||
</div>
|
</div>
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
|
|
||||||
<li id="object_puppet_classes::cd_selinux::main::install" class="odd">
|
<li id="object_puppet_classes::confdroid_selinux::main::install" class="odd">
|
||||||
<div class="item">
|
<div class="item">
|
||||||
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::cd_selinux::main::install (puppet_class)">cd_selinux::main::install</a></span>
|
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_selinux::main::install (puppet_class)">confdroid_selinux::main::install</a></span>
|
||||||
</div>
|
</div>
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
|
|
||||||
<li id="object_puppet_classes::cd_selinux::params" class="even">
|
<li id="object_puppet_classes::confdroid_selinux::params" class="even">
|
||||||
<div class="item">
|
<div class="item">
|
||||||
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span>
|
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span>
|
||||||
</div>
|
</div>
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
|
|||||||
@@ -4,7 +4,7 @@
|
|||||||
<meta charset="utf-8">
|
<meta charset="utf-8">
|
||||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
<title>
|
<title>
|
||||||
Puppet Class: cd_selinux
|
Puppet Class: confdroid_selinux
|
||||||
|
|
||||||
— Documentation by YARD 0.9.36
|
— Documentation by YARD 0.9.36
|
||||||
|
|
||||||
@@ -15,7 +15,7 @@
|
|||||||
<link rel="stylesheet" href="../css/common.css" type="text/css" />
|
<link rel="stylesheet" href="../css/common.css" type="text/css" />
|
||||||
|
|
||||||
<script type="text/javascript">
|
<script type="text/javascript">
|
||||||
pathId = "puppet_classes::cd_selinux";
|
pathId = "puppet_classes::confdroid_selinux";
|
||||||
relpath = '../';
|
relpath = '../';
|
||||||
</script>
|
</script>
|
||||||
|
|
||||||
@@ -39,7 +39,7 @@
|
|||||||
<a href="../_index.html">Index (c)</a> »
|
<a href="../_index.html">Index (c)</a> »
|
||||||
<span class='title'><span class='object_link'>Puppet Classes</span></span>
|
<span class='title'><span class='object_link'>Puppet Classes</span></span>
|
||||||
»
|
»
|
||||||
<span class="title">cd_selinux</span>
|
<span class="title">confdroid_selinux</span>
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
@@ -59,7 +59,7 @@
|
|||||||
<div class="clear"></div>
|
<div class="clear"></div>
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
<div id="content"><h1>Puppet Class: cd_selinux</h1>
|
<div id="content"><h1>Puppet Class: confdroid_selinux</h1>
|
||||||
<div class="box_info">
|
<div class="box_info">
|
||||||
|
|
||||||
|
|
||||||
@@ -72,13 +72,13 @@
|
|||||||
</div>
|
</div>
|
||||||
|
|
||||||
<h2>Summary</h2>
|
<h2>Summary</h2>
|
||||||
Class initializes the cd_selinux Module.
|
Class initializes the confdroid_selinux Module.
|
||||||
|
|
||||||
<h2>Overview</h2>
|
<h2>Overview</h2>
|
||||||
<div class="docstring">
|
<div class="docstring">
|
||||||
<div class="discussion">
|
<div class="discussion">
|
||||||
|
|
||||||
<p>cd_selinux::init.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@confdroid.com)</p>
|
<p>confdroid_selinux::init.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@confdroid.com)</p>
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
@@ -103,8 +103,8 @@
|
|||||||
<td>
|
<td>
|
||||||
<pre class="code"><span class="info file"># File 'manifests/init.pp', line 6</span>
|
<pre class="code"><span class="info file"># File 'manifests/init.pp', line 6</span>
|
||||||
|
|
||||||
class cd_selinux {
|
class confdroid_selinux {
|
||||||
include cd_selinux::params
|
include confdroid_selinux::params
|
||||||
}</pre>
|
}</pre>
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -4,7 +4,7 @@
|
|||||||
<meta charset="utf-8">
|
<meta charset="utf-8">
|
||||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
<title>
|
<title>
|
||||||
Puppet Class: cd_selinux::main::config
|
Puppet Class: confdroid_selinux::main::config
|
||||||
|
|
||||||
— Documentation by YARD 0.9.36
|
— Documentation by YARD 0.9.36
|
||||||
|
|
||||||
@@ -15,7 +15,7 @@
|
|||||||
<link rel="stylesheet" href="../css/common.css" type="text/css" />
|
<link rel="stylesheet" href="../css/common.css" type="text/css" />
|
||||||
|
|
||||||
<script type="text/javascript">
|
<script type="text/javascript">
|
||||||
pathId = "puppet_classes::cd_selinux::main::config";
|
pathId = "puppet_classes::confdroid_selinux::main::config";
|
||||||
relpath = '../';
|
relpath = '../';
|
||||||
</script>
|
</script>
|
||||||
|
|
||||||
@@ -39,7 +39,7 @@
|
|||||||
<a href="../_index.html">Index (c)</a> »
|
<a href="../_index.html">Index (c)</a> »
|
||||||
<span class='title'><span class='object_link'>Puppet Classes</span></span>
|
<span class='title'><span class='object_link'>Puppet Classes</span></span>
|
||||||
»
|
»
|
||||||
<span class="title">cd_selinux::main::config</span>
|
<span class="title">confdroid_selinux::main::config</span>
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
@@ -59,12 +59,12 @@
|
|||||||
<div class="clear"></div>
|
<div class="clear"></div>
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
<div id="content"><h1>Puppet Class: cd_selinux::main::config</h1>
|
<div id="content"><h1>Puppet Class: confdroid_selinux::main::config</h1>
|
||||||
<div class="box_info">
|
<div class="box_info">
|
||||||
|
|
||||||
<dl>
|
<dl>
|
||||||
<dt>Inherits:</dt>
|
<dt>Inherits:</dt>
|
||||||
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
|
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
|
||||||
</dl>
|
</dl>
|
||||||
|
|
||||||
|
|
||||||
@@ -77,13 +77,13 @@
|
|||||||
</div>
|
</div>
|
||||||
|
|
||||||
<h2>Summary</h2>
|
<h2>Summary</h2>
|
||||||
Class manages the module logic for cd_selinux.
|
Class manages the module logic for confdroid_selinux.
|
||||||
|
|
||||||
<h2>Overview</h2>
|
<h2>Overview</h2>
|
||||||
<div class="docstring">
|
<div class="docstring">
|
||||||
<div class="discussion">
|
<div class="discussion">
|
||||||
|
|
||||||
<p>cd_selinux::main::config.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
|
<p>confdroid_selinux::main::config.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
@@ -119,17 +119,17 @@
|
|||||||
<td>
|
<td>
|
||||||
<pre class="code"><span class="info file"># File 'manifests/main/config.pp', line 6</span>
|
<pre class="code"><span class="info file"># File 'manifests/main/config.pp', line 6</span>
|
||||||
|
|
||||||
class cd_selinux::main::config (
|
class confdroid_selinux::main::config (
|
||||||
|
|
||||||
) inherits cd_selinux::params {
|
) inherits confdroid_selinux::params {
|
||||||
include cd_selinux::main::files
|
include confdroid_selinux::main::files
|
||||||
|
|
||||||
if $sx_selinux_status == 'enforcing' {
|
if $sx_selinux_status == 'enforcing' {
|
||||||
exec { 'set_selinux_status':
|
exec { 'set_selinux_status':
|
||||||
command => 'setenforce 1',
|
command => 'setenforce 1',
|
||||||
path => ['/usr/sbin','/usr/bin'],
|
path => ['/usr/sbin','/usr/bin'],
|
||||||
provider => shell,
|
provider => shell,
|
||||||
unless => 'getenforce | grep -i "enforcing"'
|
unless => 'getenforce | grep -i "enforcing"',
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}</pre>
|
}</pre>
|
||||||
@@ -4,7 +4,7 @@
|
|||||||
<meta charset="utf-8">
|
<meta charset="utf-8">
|
||||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
<title>
|
<title>
|
||||||
Puppet Class: cd_selinux::main::dirs
|
Puppet Class: confdroid_selinux::main::dirs
|
||||||
|
|
||||||
— Documentation by YARD 0.9.36
|
— Documentation by YARD 0.9.36
|
||||||
|
|
||||||
@@ -15,7 +15,7 @@
|
|||||||
<link rel="stylesheet" href="../css/common.css" type="text/css" />
|
<link rel="stylesheet" href="../css/common.css" type="text/css" />
|
||||||
|
|
||||||
<script type="text/javascript">
|
<script type="text/javascript">
|
||||||
pathId = "puppet_classes::cd_selinux::main::dirs";
|
pathId = "puppet_classes::confdroid_selinux::main::dirs";
|
||||||
relpath = '../';
|
relpath = '../';
|
||||||
</script>
|
</script>
|
||||||
|
|
||||||
@@ -39,7 +39,7 @@
|
|||||||
<a href="../_index.html">Index (c)</a> »
|
<a href="../_index.html">Index (c)</a> »
|
||||||
<span class='title'><span class='object_link'>Puppet Classes</span></span>
|
<span class='title'><span class='object_link'>Puppet Classes</span></span>
|
||||||
»
|
»
|
||||||
<span class="title">cd_selinux::main::dirs</span>
|
<span class="title">confdroid_selinux::main::dirs</span>
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
@@ -59,12 +59,12 @@
|
|||||||
<div class="clear"></div>
|
<div class="clear"></div>
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
<div id="content"><h1>Puppet Class: cd_selinux::main::dirs</h1>
|
<div id="content"><h1>Puppet Class: confdroid_selinux::main::dirs</h1>
|
||||||
<div class="box_info">
|
<div class="box_info">
|
||||||
|
|
||||||
<dl>
|
<dl>
|
||||||
<dt>Inherits:</dt>
|
<dt>Inherits:</dt>
|
||||||
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
|
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
|
||||||
</dl>
|
</dl>
|
||||||
|
|
||||||
|
|
||||||
@@ -77,13 +77,13 @@
|
|||||||
</div>
|
</div>
|
||||||
|
|
||||||
<h2>Summary</h2>
|
<h2>Summary</h2>
|
||||||
Class manages all directories required for cd_selinux.
|
Class manages all directories required for confdroid_selinux.
|
||||||
|
|
||||||
<h2>Overview</h2>
|
<h2>Overview</h2>
|
||||||
<div class="docstring">
|
<div class="docstring">
|
||||||
<div class="discussion">
|
<div class="discussion">
|
||||||
|
|
||||||
<p>cd_selinux::main::dirs.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
|
<p>confdroid_selinux::main::dirs.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
@@ -122,10 +122,10 @@
|
|||||||
<td>
|
<td>
|
||||||
<pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 6</span>
|
<pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 6</span>
|
||||||
|
|
||||||
class cd_selinux::main::dirs (
|
class confdroid_selinux::main::dirs (
|
||||||
|
|
||||||
) inherits cd_selinux::params {
|
) inherits confdroid_selinux::params {
|
||||||
require cd_selinux::main::install
|
require confdroid_selinux::main::install
|
||||||
|
|
||||||
file { $sx_main_dir:
|
file { $sx_main_dir:
|
||||||
ensure => directory,
|
ensure => directory,
|
||||||
@@ -4,7 +4,7 @@
|
|||||||
<meta charset="utf-8">
|
<meta charset="utf-8">
|
||||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
<title>
|
<title>
|
||||||
Puppet Class: cd_selinux::main::files
|
Puppet Class: confdroid_selinux::main::files
|
||||||
|
|
||||||
— Documentation by YARD 0.9.36
|
— Documentation by YARD 0.9.36
|
||||||
|
|
||||||
@@ -15,7 +15,7 @@
|
|||||||
<link rel="stylesheet" href="../css/common.css" type="text/css" />
|
<link rel="stylesheet" href="../css/common.css" type="text/css" />
|
||||||
|
|
||||||
<script type="text/javascript">
|
<script type="text/javascript">
|
||||||
pathId = "puppet_classes::cd_selinux::main::files";
|
pathId = "puppet_classes::confdroid_selinux::main::files";
|
||||||
relpath = '../';
|
relpath = '../';
|
||||||
</script>
|
</script>
|
||||||
|
|
||||||
@@ -39,7 +39,7 @@
|
|||||||
<a href="../_index.html">Index (c)</a> »
|
<a href="../_index.html">Index (c)</a> »
|
||||||
<span class='title'><span class='object_link'>Puppet Classes</span></span>
|
<span class='title'><span class='object_link'>Puppet Classes</span></span>
|
||||||
»
|
»
|
||||||
<span class="title">cd_selinux::main::files</span>
|
<span class="title">confdroid_selinux::main::files</span>
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
@@ -59,12 +59,12 @@
|
|||||||
<div class="clear"></div>
|
<div class="clear"></div>
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
<div id="content"><h1>Puppet Class: cd_selinux::main::files</h1>
|
<div id="content"><h1>Puppet Class: confdroid_selinux::main::files</h1>
|
||||||
<div class="box_info">
|
<div class="box_info">
|
||||||
|
|
||||||
<dl>
|
<dl>
|
||||||
<dt>Inherits:</dt>
|
<dt>Inherits:</dt>
|
||||||
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
|
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
|
||||||
</dl>
|
</dl>
|
||||||
|
|
||||||
|
|
||||||
@@ -77,13 +77,13 @@
|
|||||||
</div>
|
</div>
|
||||||
|
|
||||||
<h2>Summary</h2>
|
<h2>Summary</h2>
|
||||||
Class manages all configuration files required for cd_selinux.
|
Class manages all configuration files required for confdroid_selinux.
|
||||||
|
|
||||||
<h2>Overview</h2>
|
<h2>Overview</h2>
|
||||||
<div class="docstring">
|
<div class="docstring">
|
||||||
<div class="discussion">
|
<div class="discussion">
|
||||||
|
|
||||||
<p>cd_selinux::main::files.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
|
<p>confdroid_selinux::main::files.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
@@ -123,10 +123,10 @@
|
|||||||
<td>
|
<td>
|
||||||
<pre class="code"><span class="info file"># File 'manifests/main/files.pp', line 6</span>
|
<pre class="code"><span class="info file"># File 'manifests/main/files.pp', line 6</span>
|
||||||
|
|
||||||
class cd_selinux::main::files (
|
class confdroid_selinux::main::files (
|
||||||
|
|
||||||
) inherits cd_selinux::params {
|
) inherits confdroid_selinux::params {
|
||||||
require cd_selinux::main::dirs
|
require confdroid_selinux::main::dirs
|
||||||
|
|
||||||
file { $sx_main_file:
|
file { $sx_main_file:
|
||||||
ensure => file,
|
ensure => file,
|
||||||
@@ -4,7 +4,7 @@
|
|||||||
<meta charset="utf-8">
|
<meta charset="utf-8">
|
||||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
<title>
|
<title>
|
||||||
Puppet Class: cd_selinux::main::install
|
Puppet Class: confdroid_selinux::main::install
|
||||||
|
|
||||||
— Documentation by YARD 0.9.36
|
— Documentation by YARD 0.9.36
|
||||||
|
|
||||||
@@ -15,7 +15,7 @@
|
|||||||
<link rel="stylesheet" href="../css/common.css" type="text/css" />
|
<link rel="stylesheet" href="../css/common.css" type="text/css" />
|
||||||
|
|
||||||
<script type="text/javascript">
|
<script type="text/javascript">
|
||||||
pathId = "puppet_classes::cd_selinux::main::install";
|
pathId = "puppet_classes::confdroid_selinux::main::install";
|
||||||
relpath = '../';
|
relpath = '../';
|
||||||
</script>
|
</script>
|
||||||
|
|
||||||
@@ -39,7 +39,7 @@
|
|||||||
<a href="../_index.html">Index (c)</a> »
|
<a href="../_index.html">Index (c)</a> »
|
||||||
<span class='title'><span class='object_link'>Puppet Classes</span></span>
|
<span class='title'><span class='object_link'>Puppet Classes</span></span>
|
||||||
»
|
»
|
||||||
<span class="title">cd_selinux::main::install</span>
|
<span class="title">confdroid_selinux::main::install</span>
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
@@ -59,12 +59,12 @@
|
|||||||
<div class="clear"></div>
|
<div class="clear"></div>
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
<div id="content"><h1>Puppet Class: cd_selinux::main::install</h1>
|
<div id="content"><h1>Puppet Class: confdroid_selinux::main::install</h1>
|
||||||
<div class="box_info">
|
<div class="box_info">
|
||||||
|
|
||||||
<dl>
|
<dl>
|
||||||
<dt>Inherits:</dt>
|
<dt>Inherits:</dt>
|
||||||
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
|
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
|
||||||
</dl>
|
</dl>
|
||||||
|
|
||||||
|
|
||||||
@@ -78,13 +78,13 @@
|
|||||||
|
|
||||||
<h2>Summary</h2>
|
<h2>Summary</h2>
|
||||||
Class manage all aspects of installing binaries required for
|
Class manage all aspects of installing binaries required for
|
||||||
cd_selinux
|
confdroid_selinux
|
||||||
|
|
||||||
<h2>Overview</h2>
|
<h2>Overview</h2>
|
||||||
<div class="docstring">
|
<div class="docstring">
|
||||||
<div class="discussion">
|
<div class="discussion">
|
||||||
|
|
||||||
<p>cd_selinux::main::install.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
|
<p>confdroid_selinux::main::install.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
@@ -110,30 +110,18 @@ cd_selinux
|
|||||||
12
|
12
|
||||||
13
|
13
|
||||||
14
|
14
|
||||||
15
|
15</pre>
|
||||||
16
|
|
||||||
17
|
|
||||||
18
|
|
||||||
19
|
|
||||||
20
|
|
||||||
21</pre>
|
|
||||||
</td>
|
</td>
|
||||||
<td>
|
<td>
|
||||||
<pre class="code"><span class="info file"># File 'manifests/main/install.pp', line 7</span>
|
<pre class="code"><span class="info file"># File 'manifests/main/install.pp', line 7</span>
|
||||||
|
|
||||||
class cd_selinux::main::install (
|
class confdroid_selinux::main::install (
|
||||||
|
|
||||||
) inherits cd_selinux::params {
|
) inherits confdroid_selinux::params {
|
||||||
require cd_resources
|
require confdroid_resources
|
||||||
|
|
||||||
package { $reqpackages_main:
|
package { $sx_reqpackages:
|
||||||
ensure => $pkg_ensure,
|
ensure => $sx_pkg_ensure,
|
||||||
}
|
|
||||||
|
|
||||||
if $sx_install_setools == true {
|
|
||||||
package { $reqpackages_tools:
|
|
||||||
ensure => $pkg_ensure,
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
}</pre>
|
}</pre>
|
||||||
</td>
|
</td>
|
||||||
@@ -4,7 +4,7 @@
|
|||||||
<meta charset="utf-8">
|
<meta charset="utf-8">
|
||||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
<title>
|
<title>
|
||||||
Puppet Class: cd_selinux::params
|
Puppet Class: confdroid_selinux::params
|
||||||
|
|
||||||
— Documentation by YARD 0.9.36
|
— Documentation by YARD 0.9.36
|
||||||
|
|
||||||
@@ -15,7 +15,7 @@
|
|||||||
<link rel="stylesheet" href="../css/common.css" type="text/css" />
|
<link rel="stylesheet" href="../css/common.css" type="text/css" />
|
||||||
|
|
||||||
<script type="text/javascript">
|
<script type="text/javascript">
|
||||||
pathId = "puppet_classes::cd_selinux::params";
|
pathId = "puppet_classes::confdroid_selinux::params";
|
||||||
relpath = '../';
|
relpath = '../';
|
||||||
</script>
|
</script>
|
||||||
|
|
||||||
@@ -39,7 +39,7 @@
|
|||||||
<a href="../_index.html">Index (c)</a> »
|
<a href="../_index.html">Index (c)</a> »
|
||||||
<span class='title'><span class='object_link'>Puppet Classes</span></span>
|
<span class='title'><span class='object_link'>Puppet Classes</span></span>
|
||||||
»
|
»
|
||||||
<span class="title">cd_selinux::params</span>
|
<span class="title">confdroid_selinux::params</span>
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
@@ -59,7 +59,7 @@
|
|||||||
<div class="clear"></div>
|
<div class="clear"></div>
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
<div id="content"><h1>Puppet Class: cd_selinux::params</h1>
|
<div id="content"><h1>Puppet Class: confdroid_selinux::params</h1>
|
||||||
<div class="box_info">
|
<div class="box_info">
|
||||||
|
|
||||||
|
|
||||||
@@ -67,13 +67,13 @@
|
|||||||
<dt>Inherited by:</dt>
|
<dt>Inherited by:</dt>
|
||||||
<dd>
|
<dd>
|
||||||
|
|
||||||
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::cd_selinux::main::dirs (puppet_class)">cd_selinux::main::dirs</a></span><br/>
|
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::confdroid_selinux::main::dirs (puppet_class)">confdroid_selinux::main::dirs</a></span><br/>
|
||||||
|
|
||||||
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::cd_selinux::main::files (puppet_class)">cd_selinux::main::files</a></span><br/>
|
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::confdroid_selinux::main::files (puppet_class)">confdroid_selinux::main::files</a></span><br/>
|
||||||
|
|
||||||
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::cd_selinux::main::config (puppet_class)">cd_selinux::main::config</a></span><br/>
|
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_selinux::main::config (puppet_class)">confdroid_selinux::main::config</a></span><br/>
|
||||||
|
|
||||||
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::cd_selinux::main::install (puppet_class)">cd_selinux::main::install</a></span><br/>
|
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_selinux::main::install (puppet_class)">confdroid_selinux::main::install</a></span><br/>
|
||||||
|
|
||||||
</dd>
|
</dd>
|
||||||
</dl>
|
</dl>
|
||||||
@@ -87,14 +87,14 @@
|
|||||||
</div>
|
</div>
|
||||||
|
|
||||||
<h2>Summary</h2>
|
<h2>Summary</h2>
|
||||||
Class holds all parameters for the cd_selinux module and is
|
Class holds all parameters for the confdroid_selinux module and is
|
||||||
inherited by all classes except defines.
|
inherited by all classes except defines.
|
||||||
|
|
||||||
<h2>Overview</h2>
|
<h2>Overview</h2>
|
||||||
<div class="docstring">
|
<div class="docstring">
|
||||||
<div class="discussion">
|
<div class="discussion">
|
||||||
|
|
||||||
<p>cd_selinux::params.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
|
<p>confdroid_selinux::params.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
@@ -107,7 +107,7 @@ inherited by all classes except defines.
|
|||||||
|
|
||||||
<li>
|
<li>
|
||||||
|
|
||||||
<span class='name'>pkg_ensure</span>
|
<span class='name'>sx_pkg_ensure</span>
|
||||||
|
|
||||||
|
|
||||||
<span class='type'>(<tt>String</tt>)</span>
|
<span class='type'>(<tt>String</tt>)</span>
|
||||||
@@ -125,18 +125,18 @@ inherited by all classes except defines.
|
|||||||
|
|
||||||
<li>
|
<li>
|
||||||
|
|
||||||
<span class='name'>sx_install_setools</span>
|
<span class='name'>sx_reqpackages</span>
|
||||||
|
|
||||||
|
|
||||||
<span class='type'>(<tt>Boolean</tt>)</span>
|
<span class='type'>(<tt>Array[String]</tt>)</span>
|
||||||
|
|
||||||
|
|
||||||
<em class="default">(defaults to: <tt>false</tt>)</em>
|
<em class="default">(defaults to: <tt>['selinux-policy','policycoreutils','setroubleshoot-server','policycoreutils-python-utils']</tt>)</em>
|
||||||
|
|
||||||
|
|
||||||
—
|
—
|
||||||
<div class='inline'>
|
<div class='inline'>
|
||||||
<p>Whether to install additional selinux tools, i.e. for troubleshooting.</p>
|
<p>List of packages required for selinux management. The default list includes the following packages: <code>selinux-policy</code>, <code>policycoreutils</code>, <code>setroubleshoot-server</code>, <code>policycoreutils-python</code>.</p>
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
</li>
|
</li>
|
||||||
@@ -188,8 +188,6 @@ inherited by all classes except defines.
|
|||||||
<pre class="lines">
|
<pre class="lines">
|
||||||
|
|
||||||
|
|
||||||
21
|
|
||||||
22
|
|
||||||
23
|
23
|
||||||
24
|
24
|
||||||
25
|
25
|
||||||
@@ -214,39 +212,35 @@ inherited by all classes except defines.
|
|||||||
44
|
44
|
||||||
45
|
45
|
||||||
46
|
46
|
||||||
47
|
47</pre>
|
||||||
48</pre>
|
|
||||||
</td>
|
</td>
|
||||||
<td>
|
<td>
|
||||||
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 21</span>
|
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 23</span>
|
||||||
|
|
||||||
class cd_selinux::params (
|
class confdroid_selinux::params (
|
||||||
|
|
||||||
String $pkg_ensure = 'latest',
|
Array[String] $sx_reqpackages = ['selinux-policy','policycoreutils','setroubleshoot-server','policycoreutils-python-utils'],
|
||||||
|
String $sx_pkg_ensure = 'latest',
|
||||||
Boolean $sx_install_setools = false,
|
|
||||||
String $sx_selinux_status = 'enforcing',
|
String $sx_selinux_status = 'enforcing',
|
||||||
String $sx_selinux_type = 'targeted',
|
String $sx_selinux_type = 'targeted',
|
||||||
|
|
||||||
) {
|
) {
|
||||||
# installation section
|
# default facts
|
||||||
$reqpackages_main = $::operatingsystem ? {
|
$fqdn = $facts['networking']['fqdn']
|
||||||
/(?i-mx:centos|fedora|redhat)/ => ['selinux-policy','policycoreutils'],
|
$hostname = $facts['networking']['hostname']
|
||||||
}
|
$domain = $facts['networking']['domain']
|
||||||
|
$os_name = $facts['os']['name']
|
||||||
$reqpackages_tools = $::operatingsystem ? {
|
$os_release = $facts['os']['release']['major']
|
||||||
/(?i-mx:centos|fedora|redhat)/ => ['setroubleshoot-server','policycoreutils-python'],
|
|
||||||
}
|
|
||||||
|
|
||||||
# directories
|
# directories
|
||||||
$sx_main_dir = '/etc/selinux'
|
$sx_main_dir = '/etc/selinux'
|
||||||
|
|
||||||
# files
|
# files
|
||||||
$sx_main_file = "${sx_main_dir}/config"
|
$sx_main_file = "${sx_main_dir}/config"
|
||||||
$sx_main_file_erb = 'cd_selinux/main/selinux_config.erb'
|
$sx_main_file_erb = 'confdroid_selinux/main/selinux_config.erb'
|
||||||
|
|
||||||
# includes must be last
|
# includes must be last
|
||||||
include cd_selinux::main::config
|
include confdroid_selinux::main::config
|
||||||
}</pre>
|
}</pre>
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -1,8 +1,8 @@
|
|||||||
## cd_selinux::init.pp
|
## confdroid_selinux::init.pp
|
||||||
# Module name: cd_selinux
|
# Module name: confdroid_selinux
|
||||||
# Author: Arne Teuke (arne_teuke@confdroid.com)
|
# Author: 12ww1160 (12ww1160@confdroid.com)
|
||||||
# @summary Class initializes the cd_selinux Module.
|
# @summary Class initializes the confdroid_selinux Module.
|
||||||
##############################################################################
|
##############################################################################
|
||||||
class cd_selinux {
|
class confdroid_selinux {
|
||||||
include cd_selinux::params
|
include confdroid_selinux::params
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,19 +1,19 @@
|
|||||||
## cd_selinux::main::config.pp
|
## confdroid_selinux::main::config.pp
|
||||||
# Module name: cd_selinux
|
# Module name: confdroid_selinux
|
||||||
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
|
# Author: 12ww1160 (12ww1160@ConfDroid.com)
|
||||||
# @summary Class manages the module logic for cd_selinux.
|
# @summary Class manages the module logic for confdroid_selinux.
|
||||||
##############################################################################
|
##############################################################################
|
||||||
class cd_selinux::main::config (
|
class confdroid_selinux::main::config (
|
||||||
|
|
||||||
) inherits cd_selinux::params {
|
) inherits confdroid_selinux::params {
|
||||||
include cd_selinux::main::files
|
include confdroid_selinux::main::files
|
||||||
|
|
||||||
if $sx_selinux_status == 'enforcing' {
|
if $sx_selinux_status == 'enforcing' {
|
||||||
exec { 'set_selinux_status':
|
exec { 'set_selinux_status':
|
||||||
command => 'setenforce 1',
|
command => 'setenforce 1',
|
||||||
path => ['/usr/sbin','/usr/bin'],
|
path => ['/usr/sbin','/usr/bin'],
|
||||||
provider => shell,
|
provider => shell,
|
||||||
unless => 'getenforce | grep -i "enforcing"'
|
unless => 'getenforce | grep -i "enforcing"',
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,12 +1,12 @@
|
|||||||
## cd_selinux::main::dirs.pp
|
## confdroid_selinux::main::dirs.pp
|
||||||
# Module name: cd_selinux
|
# Module name: confdroid_selinux
|
||||||
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
|
# Author: 12ww1160 (12ww1160@ConfDroid.com)
|
||||||
# @summary Class manages all directories required for cd_selinux.
|
# @summary Class manages all directories required for confdroid_selinux.
|
||||||
###############################################################################
|
###############################################################################
|
||||||
class cd_selinux::main::dirs (
|
class confdroid_selinux::main::dirs (
|
||||||
|
|
||||||
) inherits cd_selinux::params {
|
) inherits confdroid_selinux::params {
|
||||||
require cd_selinux::main::install
|
require confdroid_selinux::main::install
|
||||||
|
|
||||||
file { $sx_main_dir:
|
file { $sx_main_dir:
|
||||||
ensure => directory,
|
ensure => directory,
|
||||||
|
|||||||
@@ -1,12 +1,12 @@
|
|||||||
## cd_selinux::main::files.pp
|
## confdroid_selinux::main::files.pp
|
||||||
# Module name: cd_selinux
|
# Module name: confdroid_selinux
|
||||||
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
|
# Author: 12ww1160 (12ww1160@ConfDroid.com)
|
||||||
# @summary Class manages all configuration files required for cd_selinux.
|
# @summary Class manages all configuration files required for confdroid_selinux.
|
||||||
##############################################################################
|
##############################################################################
|
||||||
class cd_selinux::main::files (
|
class confdroid_selinux::main::files (
|
||||||
|
|
||||||
) inherits cd_selinux::params {
|
) inherits confdroid_selinux::params {
|
||||||
require cd_selinux::main::dirs
|
require confdroid_selinux::main::dirs
|
||||||
|
|
||||||
file { $sx_main_file:
|
file { $sx_main_file:
|
||||||
ensure => file,
|
ensure => file,
|
||||||
|
|||||||
@@ -1,21 +1,15 @@
|
|||||||
## cd_selinux::main::install.pp
|
## confdroid_selinux::main::install.pp
|
||||||
# Module name: cd_selinux
|
# Module name: confdroid_selinux
|
||||||
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
|
# Author: 12ww1160 (12ww1160@ConfDroid.com)
|
||||||
# @summary Class manage all aspects of installing binaries required for
|
# @summary Class manage all aspects of installing binaries required for
|
||||||
# cd_selinux
|
# confdroid_selinux
|
||||||
###############################################################################
|
###############################################################################
|
||||||
class cd_selinux::main::install (
|
class confdroid_selinux::main::install (
|
||||||
|
|
||||||
) inherits cd_selinux::params {
|
) inherits confdroid_selinux::params {
|
||||||
require cd_resources
|
require confdroid_resources
|
||||||
|
|
||||||
package { $reqpackages_main:
|
package { $sx_reqpackages:
|
||||||
ensure => $pkg_ensure,
|
ensure => $sx_pkg_ensure,
|
||||||
}
|
|
||||||
|
|
||||||
if $sx_install_setools == true {
|
|
||||||
package { $reqpackages_tools:
|
|
||||||
ensure => $pkg_ensure,
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,13 +1,15 @@
|
|||||||
## cd_selinux::params.pp
|
## confdroid_selinux::params.pp
|
||||||
# Module name: cd_selinux
|
# Module name: confdroid_selinux
|
||||||
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
|
# Author: 12ww1160 (12ww1160@ConfDroid.com)
|
||||||
# @summary Class holds all parameters for the cd_selinux module and is
|
# @summary Class holds all parameters for the confdroid_selinux module and is
|
||||||
# inherited by all classes except defines.
|
# inherited by all classes except defines.
|
||||||
# @param [String] pkg_ensure
|
# @param [String] sx_pkg_ensure
|
||||||
# which [package type](https://confdroid.com/2017/05/puppet-type-package/)
|
# which [package type](https://confdroid.com/2017/05/puppet-type-package/)
|
||||||
# to choose, i.e. `latest` or `present`.
|
# to choose, i.e. `latest` or `present`.
|
||||||
# @param [Boolean] sx_install_setools Whether to install additional selinux
|
# @param [Array[String]] sx_reqpackages
|
||||||
# tools, i.e. for troubleshooting.
|
# List of packages required for selinux management. The default list includes
|
||||||
|
# the following packages: `selinux-policy`, `policycoreutils`,
|
||||||
|
# `setroubleshoot-server`, `policycoreutils-python`.
|
||||||
# @param [String] sx_selinux_status The desired selinux status. Used for both
|
# @param [String] sx_selinux_status The desired selinux status. Used for both
|
||||||
# managing the configuration file as well as the command line (setenforce).
|
# managing the configuration file as well as the command line (setenforce).
|
||||||
# Valid values are `enforcing` and `permissive`. While the configuration file
|
# Valid values are `enforcing` and `permissive`. While the configuration file
|
||||||
@@ -18,31 +20,28 @@
|
|||||||
# @param [String] sx_selinux_type The desired selinux type. Valid options are
|
# @param [String] sx_selinux_type The desired selinux type. Valid options are
|
||||||
# `targeted`, `minimum` and `mls`.
|
# `targeted`, `minimum` and `mls`.
|
||||||
##############################################################################
|
##############################################################################
|
||||||
class cd_selinux::params (
|
class confdroid_selinux::params (
|
||||||
|
|
||||||
String $pkg_ensure = 'latest',
|
Array[String] $sx_reqpackages = ['selinux-policy','policycoreutils','setroubleshoot-server','policycoreutils-python-utils'],
|
||||||
|
String $sx_pkg_ensure = 'latest',
|
||||||
Boolean $sx_install_setools = false,
|
|
||||||
String $sx_selinux_status = 'enforcing',
|
String $sx_selinux_status = 'enforcing',
|
||||||
String $sx_selinux_type = 'targeted',
|
String $sx_selinux_type = 'targeted',
|
||||||
|
|
||||||
) {
|
) {
|
||||||
# installation section
|
# default facts
|
||||||
$reqpackages_main = $::operatingsystem ? {
|
$fqdn = $facts['networking']['fqdn']
|
||||||
/(?i-mx:centos|fedora|redhat)/ => ['selinux-policy','policycoreutils'],
|
$hostname = $facts['networking']['hostname']
|
||||||
}
|
$domain = $facts['networking']['domain']
|
||||||
|
$os_name = $facts['os']['name']
|
||||||
$reqpackages_tools = $::operatingsystem ? {
|
$os_release = $facts['os']['release']['major']
|
||||||
/(?i-mx:centos|fedora|redhat)/ => ['setroubleshoot-server','policycoreutils-python'],
|
|
||||||
}
|
|
||||||
|
|
||||||
# directories
|
# directories
|
||||||
$sx_main_dir = '/etc/selinux'
|
$sx_main_dir = '/etc/selinux'
|
||||||
|
|
||||||
# files
|
# files
|
||||||
$sx_main_file = "${sx_main_dir}/config"
|
$sx_main_file = "${sx_main_dir}/config"
|
||||||
$sx_main_file_erb = 'cd_selinux/main/selinux_config.erb'
|
$sx_main_file_erb = 'confdroid_selinux/main/selinux_config.erb'
|
||||||
|
|
||||||
# includes must be last
|
# includes must be last
|
||||||
include cd_selinux::main::config
|
include confdroid_selinux::main::config
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,6 +1,7 @@
|
|||||||
################################################################################
|
################################################################################
|
||||||
########## /etc/selinux/config managed by Puppet ##########
|
########## /etc/selinux/config managed by Puppet ##########
|
||||||
########## manual changes will be overwritten !!! ##########
|
########## manual changes will be overwritten !!! ##########
|
||||||
|
########## original file: https://3for.me/wdtuj ##########
|
||||||
################################################################################
|
################################################################################
|
||||||
SELINUX=<%= @sx_selinux_status %>
|
SELINUX=<%= @sx_selinux_status %>
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user