confdroid/confdroid_selinux
1
0
Fork 0
Code Issues Projects Wiki Activity

Compare commits

base: confdroid:master
Branches Tags
confdroid:master
confdroid:1.0.0-4.2026
..
compare: confdroid:3f880a412ade28f32b416974d96f9f58067de26b
Branches Tags
confdroid:master
confdroid:1.0.0-4.2026

1 Commits
master ... 3f880a412a

Author SHA1 Message Date
Jenkins
3f880a412a Merge branch 'jenkins-build-3' into 'master' 
Auto-merge for build 3

See merge request puppet/cd_selinux!1
 2026-04-05 16:47:55 +02:00
20 changed files with 234 additions and 216 deletions
Expand all files Collapse all files

1
.gitignore vendored
View File

@@ -2,4 +2,3 @@
Gemfile.lock Gemfile.lock
FileList FileList
.scannerwork .scannerwork
.vscode

3
.puppet-lint.rc
View File

@@ -1,3 +0,0 @@
--no-variable_scope-check
--no-top_scope_facts
--no-140chars-check

44
README.md
View File

@@ -1,13 +1,14 @@
# Readme # Readme
[![Build Status](https://jenkins.confdroid.com/buildStatus/icon?job=confdroid_selinux&style=plastic)](https://jenkins.confdroid.com/job/confdroid_selinux/) [![Build Status](https://jenkins.confdroid.com/buildStatus/icon?job=cd_selinux)](https://jenkins.confdroid.com/job/cd_selinux/)
[![Security Hotspots](https://sonarqube.confdroid.com/api/project_badges/measure?project=confdroid_selinux&metric=security_hotspots&token=sqb_cc73d9e100a7cda91c7f45b8a7690bd16498e852)](https://sonarqube.confdroid.com/dashboard?id=confdroid_selinux)
[[_TOC_]]
## Synopsis ## Synopsis
[Security-Enhanced Linux (SELinux)](https://en.wikipedia.org/wiki/Security-Enhanced_Linux) is a Linux kernel security module that provides a mechanism for supporting access control security policies. [Security-Enhanced Linux (SELinux)](https://en.wikipedia.org/wiki/Security-Enhanced_Linux) is a Linux kernel security module that provides a mechanism for supporting access control security policies.
`confdroid_selinux` is a Puppet module to automate installation, configuration and troubleshooting of selinux. `cd_selinux` is a Puppet module to automate installation, configuration and troubleshooting of selinux.
## WARNING ## WARNING
@@ -17,12 +18,12 @@
Installation: Installation:
- install binaries required for selinux and related tools * install binaries required for selinux and related tools
Configuration Configuration
- manage `/etc/sysconfig/selinux` file (file system permissions, selinux context, content) * manage `/etc/sysconfig/selinux` file (file system permissions, selinux context, content)
- manage current selinux status (permissive,enforcing) * manage current selinux status (permissive,enforcing)
## Repo Documentation ## Repo Documentation
@@ -32,23 +33,23 @@ See the full Puppet documentation including parameters in `docs/index.html`.
All dependencies must be included in the catalogue. All dependencies must be included in the catalogue.
- [confdroid_resources](https://sourcecode.confdroid.com/confdroid/confdroid_resources) for yum repo resources. * [cd_resources](https://gitlab.confdroid.com/puppet/cd_resources) for yum repo resources.
## Deployment ## Deployment
- native Puppet deployment * native Puppet deployment
via site.pp or nodes.pp via site.pp or nodes.pp
```ruby ```ruby
node 'example.example.net' { node 'example.example.net' {
include confdroid_selinux include cd_selinux
} }
``` ```
- through Foreman: * through Foreman:
In order to apply parameters through Foreman, **confdroid_selinux::params*- must be added to the host or host group in question. In order to apply parameters through Foreman, **__cd_selinux::params__** must be added to the host or host group in question.
See [more details about class deployment on Confdroid.com](https://confdroid.com/2017/05/deploying-our-puppet-modules/). See [more details about class deployment on Confdroid.com](https://confdroid.com/2017/05/deploying-our-puppet-modules/).
@@ -58,26 +59,25 @@ All files and directories are configured with correct selinux context. If selinu
## Known Problems ## Known Problems
- Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will **not**- do the reboot for you to avoid unexpected outages. * Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will **__not__** do the reboot for you to avoid unexpected outages.
## Support ## Support
- OS: Rocky 9 (any RHEL9-based OS should work, but Rocky has been tested) * OS: CentOS 7
- Puppet 8 * Puppet 5,6
## Tests ## Tests
- Puppet Lint * Puppet Lint
- excluded tests: * excluded tests:
- `--no-variable_scope-check`: not applicable as we are inheriting parameters from params class. the lint check does not distinguish between facts and inherited parameters. * `--no-variable_scope-check`: not applicable as we are inheriting parameters from params class. the lint check does not distinguish between facts and inherited parameters.
- Puppet Parser * Puppet Parser
- ERB Template Parser * ERB Template Parser
- Sonar Quality Gate * Sonar Quality Gate
## Contact Us ## Contact Us
- [contact Us](https://confdroid.com/contact/) [contact Us](https://confdroid.com/contact/)
- [Feedback Portal](https://feedback.confdroid.com/)
## Disclaimer ## Disclaimer

12
doc/_index.html
View File

@@ -69,32 +69,32 @@
<ul> <ul>
<li> <li>
<span class='object_link'><a href="puppet_classes/confdroid_selinux.html" title="puppet_classes::confdroid_selinux (puppet_class)">confdroid_selinux</a></span> <span class='object_link'><a href="puppet_classes/cd_selinux.html" title="puppet_classes::cd_selinux (puppet_class)">cd_selinux</a></span>
</li> </li>
<li> <li>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_selinux::main::config (puppet_class)">confdroid_selinux::main::config</a></span> <span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::cd_selinux::main::config (puppet_class)">cd_selinux::main::config</a></span>
</li> </li>
<li> <li>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::confdroid_selinux::main::dirs (puppet_class)">confdroid_selinux::main::dirs</a></span> <span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::cd_selinux::main::dirs (puppet_class)">cd_selinux::main::dirs</a></span>
</li> </li>
<li> <li>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::confdroid_selinux::main::files (puppet_class)">confdroid_selinux::main::files</a></span> <span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::cd_selinux::main::files (puppet_class)">cd_selinux::main::files</a></span>
</li> </li>
<li> <li>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_selinux::main::install (puppet_class)">confdroid_selinux::main::install</a></span> <span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::cd_selinux::main::install (puppet_class)">cd_selinux::main::install</a></span>
</li> </li>
<li> <li>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span> <span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span>
</li> </li>

23
doc/file.README.html
View File

@@ -60,13 +60,15 @@
<div id="content"><div id='filecontents'> <div id="content"><div id='filecontents'>
<h1 id="label-Readme">Readme</h1> <h1 id="label-Readme">Readme</h1>
<p><a href="https://jenkins.confdroid.com/job/confdroid_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=confdroid_selinux&amp;style=plastic"></a> <a href="https://sonarqube.confdroid.com/dashboard?id=confdroid_selinux"><img src="https://sonarqube.confdroid.com/api/project_badges/measure?project=confdroid_selinux&amp;metric=security_hotspots&amp;token=sqb_cc73d9e100a7cda91c7f45b8a7690bd16498e852"></a></p> <p><a href="https://jenkins.confdroid.com/job/cd_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=cd_selinux"></a></p>
<p>[[<em>TOC</em>]]</p>
<h2 id="label-Synopsis">Synopsis</h2> <h2 id="label-Synopsis">Synopsis</h2>
<p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p> <p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p>
<p><code>confdroid_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p> <p><code>cd_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
<h2 id="label-WARNING">WARNING</h2> <h2 id="label-WARNING">WARNING</h2>
@@ -94,7 +96,7 @@
<p>All dependencies must be included in the catalogue.</p> <p>All dependencies must be included in the catalogue.</p>
<ul><li> <ul><li>
<p><a href="https://sourcecode.confdroid.com/confdroid/confdroid_resources">confdroid_resources</a> for yum repo resources.</p> <p><a href="https://gitlab.confdroid.com/puppet/cd_resources">cd_resources</a> for yum repo resources.</p>
</li></ul> </li></ul>
<h2 id="label-Deployment">Deployment</h2> <h2 id="label-Deployment">Deployment</h2>
@@ -105,14 +107,14 @@
<p>via site.pp or nodes.pp</p> <p>via site.pp or nodes.pp</p>
<pre class="code ruby"><code class="ruby">node &#39;example.example.net&#39; { <pre class="code ruby"><code class="ruby">node &#39;example.example.net&#39; {
include confdroid_selinux include cd_selinux
} }
</code></pre> </code></pre>
<ul><li> <ul><li>
<p>through Foreman:</p> <p>through Foreman:</p>
</li></ul> </li></ul>
<p>In order to apply parameters through Foreman, *<em>confdroid_selinux::params</em>- must be added to the host or host group in question.</p> <p>In order to apply parameters through Foreman, <strong>cd_selinux::params</strong> must be added to the host or host group in question.</p>
<p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p> <p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p>
@@ -122,14 +124,14 @@
<h2 id="label-Known+Problems">Known Problems</h2> <h2 id="label-Known+Problems">Known Problems</h2>
<ul><li> <ul><li>
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong>- do the reboot for you to avoid unexpected outages.</p> <p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong> do the reboot for you to avoid unexpected outages.</p>
</li></ul> </li></ul>
<h2 id="label-Support">Support</h2> <h2 id="label-Support">Support</h2>
<ul><li> <ul><li>
<p>OS: Rocky 9 (any RHEL9-based OS should work, but Rocky has been tested)</p> <p>OS: CentOS 7</p>
</li><li> </li><li>
<p>Puppet 8</p> <p>Puppet 5,6</p>
</li></ul> </li></ul>
<h2 id="label-Tests">Tests</h2> <h2 id="label-Tests">Tests</h2>
@@ -149,11 +151,8 @@
</li></ul> </li></ul>
<h2 id="label-Contact+Us">Contact Us</h2> <h2 id="label-Contact+Us">Contact Us</h2>
<ul><li>
<p><a href="https://confdroid.com/contact/">contact Us</a></p> <p><a href="https://confdroid.com/contact/">contact Us</a></p>
</li><li>
<p><a href="https://feedback.confdroid.com/">Feedback Portal</a></p>
</li></ul>
<h2 id="label-Disclaimer">Disclaimer</h2> <h2 id="label-Disclaimer">Disclaimer</h2>

23
doc/index.html
View File

@@ -60,13 +60,15 @@
<div id="content"><div id='filecontents'> <div id="content"><div id='filecontents'>
<h1 id="label-Readme">Readme</h1> <h1 id="label-Readme">Readme</h1>
<p><a href="https://jenkins.confdroid.com/job/confdroid_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=confdroid_selinux&amp;style=plastic"></a> <a href="https://sonarqube.confdroid.com/dashboard?id=confdroid_selinux"><img src="https://sonarqube.confdroid.com/api/project_badges/measure?project=confdroid_selinux&amp;metric=security_hotspots&amp;token=sqb_cc73d9e100a7cda91c7f45b8a7690bd16498e852"></a></p> <p><a href="https://jenkins.confdroid.com/job/cd_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=cd_selinux"></a></p>
<p>[[<em>TOC</em>]]</p>
<h2 id="label-Synopsis">Synopsis</h2> <h2 id="label-Synopsis">Synopsis</h2>
<p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p> <p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p>
<p><code>confdroid_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p> <p><code>cd_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
<h2 id="label-WARNING">WARNING</h2> <h2 id="label-WARNING">WARNING</h2>
@@ -94,7 +96,7 @@
<p>All dependencies must be included in the catalogue.</p> <p>All dependencies must be included in the catalogue.</p>
<ul><li> <ul><li>
<p><a href="https://sourcecode.confdroid.com/confdroid/confdroid_resources">confdroid_resources</a> for yum repo resources.</p> <p><a href="https://gitlab.confdroid.com/puppet/cd_resources">cd_resources</a> for yum repo resources.</p>
</li></ul> </li></ul>
<h2 id="label-Deployment">Deployment</h2> <h2 id="label-Deployment">Deployment</h2>
@@ -105,14 +107,14 @@
<p>via site.pp or nodes.pp</p> <p>via site.pp or nodes.pp</p>
<pre class="code ruby"><code class="ruby">node &#39;example.example.net&#39; { <pre class="code ruby"><code class="ruby">node &#39;example.example.net&#39; {
include confdroid_selinux include cd_selinux
} }
</code></pre> </code></pre>
<ul><li> <ul><li>
<p>through Foreman:</p> <p>through Foreman:</p>
</li></ul> </li></ul>
<p>In order to apply parameters through Foreman, *<em>confdroid_selinux::params</em>- must be added to the host or host group in question.</p> <p>In order to apply parameters through Foreman, <strong>cd_selinux::params</strong> must be added to the host or host group in question.</p>
<p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p> <p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p>
@@ -122,14 +124,14 @@
<h2 id="label-Known+Problems">Known Problems</h2> <h2 id="label-Known+Problems">Known Problems</h2>
<ul><li> <ul><li>
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong>- do the reboot for you to avoid unexpected outages.</p> <p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong> do the reboot for you to avoid unexpected outages.</p>
</li></ul> </li></ul>
<h2 id="label-Support">Support</h2> <h2 id="label-Support">Support</h2>
<ul><li> <ul><li>
<p>OS: Rocky 9 (any RHEL9-based OS should work, but Rocky has been tested)</p> <p>OS: CentOS 7</p>
</li><li> </li><li>
<p>Puppet 8</p> <p>Puppet 5,6</p>
</li></ul> </li></ul>
<h2 id="label-Tests">Tests</h2> <h2 id="label-Tests">Tests</h2>
@@ -149,11 +151,8 @@
</li></ul> </li></ul>
<h2 id="label-Contact+Us">Contact Us</h2> <h2 id="label-Contact+Us">Contact Us</h2>
<ul><li>
<p><a href="https://confdroid.com/contact/">contact Us</a></p> <p><a href="https://confdroid.com/contact/">contact Us</a></p>
</li><li>
<p><a href="https://feedback.confdroid.com/">Feedback Portal</a></p>
</li></ul>
<h2 id="label-Disclaimer">Disclaimer</h2> <h2 id="label-Disclaimer">Disclaimer</h2>

24
doc/puppet_class_list.html
View File

@@ -36,44 +36,44 @@
<ul id="full_list" class="puppet_class"> <ul id="full_list" class="puppet_class">
<li id="object_puppet_classes::confdroid_selinux" class="odd"> <li id="object_puppet_classes::cd_selinux" class="odd">
<div class="item"> <div class="item">
<span class='object_link'><a href="puppet_classes/confdroid_selinux.html" title="puppet_classes::confdroid_selinux (puppet_class)">confdroid_selinux</a></span> <span class='object_link'><a href="puppet_classes/cd_selinux.html" title="puppet_classes::cd_selinux (puppet_class)">cd_selinux</a></span>
</div> </div>
</li> </li>
<li id="object_puppet_classes::confdroid_selinux::main::config" class="even"> <li id="object_puppet_classes::cd_selinux::main::config" class="even">
<div class="item"> <div class="item">
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_selinux::main::config (puppet_class)">confdroid_selinux::main::config</a></span> <span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::cd_selinux::main::config (puppet_class)">cd_selinux::main::config</a></span>
</div> </div>
</li> </li>
<li id="object_puppet_classes::confdroid_selinux::main::dirs" class="odd"> <li id="object_puppet_classes::cd_selinux::main::dirs" class="odd">
<div class="item"> <div class="item">
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::confdroid_selinux::main::dirs (puppet_class)">confdroid_selinux::main::dirs</a></span> <span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::cd_selinux::main::dirs (puppet_class)">cd_selinux::main::dirs</a></span>
</div> </div>
</li> </li>
<li id="object_puppet_classes::confdroid_selinux::main::files" class="even"> <li id="object_puppet_classes::cd_selinux::main::files" class="even">
<div class="item"> <div class="item">
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::confdroid_selinux::main::files (puppet_class)">confdroid_selinux::main::files</a></span> <span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::cd_selinux::main::files (puppet_class)">cd_selinux::main::files</a></span>
</div> </div>
</li> </li>
<li id="object_puppet_classes::confdroid_selinux::main::install" class="odd"> <li id="object_puppet_classes::cd_selinux::main::install" class="odd">
<div class="item"> <div class="item">
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_selinux::main::install (puppet_class)">confdroid_selinux::main::install</a></span> <span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::cd_selinux::main::install (puppet_class)">cd_selinux::main::install</a></span>
</div> </div>
</li> </li>
<li id="object_puppet_classes::confdroid_selinux::params" class="even"> <li id="object_puppet_classes::cd_selinux::params" class="even">
<div class="item"> <div class="item">
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span> <span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span>
</div> </div>
</li> </li>

16
doc/puppet_classes/confdroid_selinux.html → doc/puppet_classes/cd_selinux.html
View File

@@ -4,7 +4,7 @@
<meta charset="utf-8"> <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<title> <title>
Puppet Class: confdroid_selinux Puppet Class: cd_selinux
&mdash; Documentation by YARD 0.9.36 &mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" /> <link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript"> <script type="text/javascript">
pathId = "puppet_classes::confdroid_selinux"; pathId = "puppet_classes::cd_selinux";
relpath = '../'; relpath = '../';
</script> </script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo; <a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span> <span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo; &raquo;
<span class="title">confdroid_selinux</span> <span class="title">cd_selinux</span>
</div> </div>
@@ -59,7 +59,7 @@
<div class="clear"></div> <div class="clear"></div>
</div> </div>
<div id="content"><h1>Puppet Class: confdroid_selinux</h1> <div id="content"><h1>Puppet Class: cd_selinux</h1>
<div class="box_info"> <div class="box_info">
@@ -72,13 +72,13 @@
</div> </div>
<h2>Summary</h2> <h2>Summary</h2>
Class initializes the confdroid_selinux Module. Class initializes the cd_selinux Module.
<h2>Overview</h2> <h2>Overview</h2>
<div class="docstring"> <div class="docstring">
<div class="discussion"> <div class="discussion">
<p>confdroid_selinux::init.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@confdroid.com)</p> <p>cd_selinux::init.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@confdroid.com)</p>
</div> </div>
</div> </div>
@@ -103,8 +103,8 @@
<td> <td>
<pre class="code"><span class="info file"># File 'manifests/init.pp', line 6</span> <pre class="code"><span class="info file"># File 'manifests/init.pp', line 6</span>
class confdroid_selinux { class cd_selinux {
include confdroid_selinux::params include cd_selinux::params
}</pre> }</pre>
</td> </td>
</tr> </tr>

22
doc/puppet_classes/confdroid_selinux_3A_3Amain_3A_3Aconfig.html → doc/puppet_classes/cd_selinux_3A_3Amain_3A_3Aconfig.html
View File

@@ -4,7 +4,7 @@
<meta charset="utf-8"> <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<title> <title>
Puppet Class: confdroid_selinux::main::config Puppet Class: cd_selinux::main::config
&mdash; Documentation by YARD 0.9.36 &mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" /> <link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript"> <script type="text/javascript">
pathId = "puppet_classes::confdroid_selinux::main::config"; pathId = "puppet_classes::cd_selinux::main::config";
relpath = '../'; relpath = '../';
</script> </script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo; <a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span> <span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo; &raquo;
<span class="title">confdroid_selinux::main::config</span> <span class="title">cd_selinux::main::config</span>
</div> </div>
@@ -59,12 +59,12 @@
<div class="clear"></div> <div class="clear"></div>
</div> </div>
<div id="content"><h1>Puppet Class: confdroid_selinux::main::config</h1> <div id="content"><h1>Puppet Class: cd_selinux::main::config</h1>
<div class="box_info"> <div class="box_info">
<dl> <dl>
<dt>Inherits:</dt> <dt>Inherits:</dt>
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd> <dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
</dl> </dl>
@@ -77,13 +77,13 @@
</div> </div>
<h2>Summary</h2> <h2>Summary</h2>
Class manages the module logic for confdroid_selinux. Class manages the module logic for cd_selinux.
<h2>Overview</h2> <h2>Overview</h2>
<div class="docstring"> <div class="docstring">
<div class="discussion"> <div class="discussion">
<p>confdroid_selinux::main::config.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p> <p>cd_selinux::main::config.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
</div> </div>
</div> </div>
@@ -119,17 +119,17 @@
<td> <td>
<pre class="code"><span class="info file"># File 'manifests/main/config.pp', line 6</span> <pre class="code"><span class="info file"># File 'manifests/main/config.pp', line 6</span>
class confdroid_selinux::main::config ( class cd_selinux::main::config (
) inherits confdroid_selinux::params { ) inherits cd_selinux::params {
include confdroid_selinux::main::files include cd_selinux::main::files
if $sx_selinux_status == &#39;enforcing&#39; { if $sx_selinux_status == &#39;enforcing&#39; {
exec { &#39;set_selinux_status&#39;: exec { &#39;set_selinux_status&#39;:
command =&gt; &#39;setenforce 1&#39;, command =&gt; &#39;setenforce 1&#39;,
path =&gt; [&#39;/usr/sbin&#39;,&#39;/usr/bin&#39;], path =&gt; [&#39;/usr/sbin&#39;,&#39;/usr/bin&#39;],
provider =&gt; shell, provider =&gt; shell,
unless =&gt; &#39;getenforce | grep -i &quot;enforcing&quot;&#39;, unless =&gt; &#39;getenforce | grep -i &quot;enforcing&quot;&#39;
} }
} }
}</pre> }</pre>

20
doc/puppet_classes/confdroid_selinux_3A_3Amain_3A_3Adirs.html → doc/puppet_classes/cd_selinux_3A_3Amain_3A_3Adirs.html
View File

@@ -4,7 +4,7 @@
<meta charset="utf-8"> <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<title> <title>
Puppet Class: confdroid_selinux::main::dirs Puppet Class: cd_selinux::main::dirs
&mdash; Documentation by YARD 0.9.36 &mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" /> <link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript"> <script type="text/javascript">
pathId = "puppet_classes::confdroid_selinux::main::dirs"; pathId = "puppet_classes::cd_selinux::main::dirs";
relpath = '../'; relpath = '../';
</script> </script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo; <a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span> <span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo; &raquo;
<span class="title">confdroid_selinux::main::dirs</span> <span class="title">cd_selinux::main::dirs</span>
</div> </div>
@@ -59,12 +59,12 @@
<div class="clear"></div> <div class="clear"></div>
</div> </div>
<div id="content"><h1>Puppet Class: confdroid_selinux::main::dirs</h1> <div id="content"><h1>Puppet Class: cd_selinux::main::dirs</h1>
<div class="box_info"> <div class="box_info">
<dl> <dl>
<dt>Inherits:</dt> <dt>Inherits:</dt>
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd> <dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
</dl> </dl>
@@ -77,13 +77,13 @@
</div> </div>
<h2>Summary</h2> <h2>Summary</h2>
Class manages all directories required for confdroid_selinux. Class manages all directories required for cd_selinux.
<h2>Overview</h2> <h2>Overview</h2>
<div class="docstring"> <div class="docstring">
<div class="discussion"> <div class="discussion">
<p>confdroid_selinux::main::dirs.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p> <p>cd_selinux::main::dirs.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
</div> </div>
</div> </div>
@@ -122,10 +122,10 @@
<td> <td>
<pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 6</span> <pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 6</span>
class confdroid_selinux::main::dirs ( class cd_selinux::main::dirs (
) inherits confdroid_selinux::params { ) inherits cd_selinux::params {
require confdroid_selinux::main::install require cd_selinux::main::install
file { $sx_main_dir: file { $sx_main_dir:
ensure =&gt; directory, ensure =&gt; directory,

20
doc/puppet_classes/confdroid_selinux_3A_3Amain_3A_3Afiles.html → doc/puppet_classes/cd_selinux_3A_3Amain_3A_3Afiles.html
View File

@@ -4,7 +4,7 @@
<meta charset="utf-8"> <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<title> <title>
Puppet Class: confdroid_selinux::main::files Puppet Class: cd_selinux::main::files
&mdash; Documentation by YARD 0.9.36 &mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" /> <link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript"> <script type="text/javascript">
pathId = "puppet_classes::confdroid_selinux::main::files"; pathId = "puppet_classes::cd_selinux::main::files";
relpath = '../'; relpath = '../';
</script> </script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo; <a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span> <span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo; &raquo;
<span class="title">confdroid_selinux::main::files</span> <span class="title">cd_selinux::main::files</span>
</div> </div>
@@ -59,12 +59,12 @@
<div class="clear"></div> <div class="clear"></div>
</div> </div>
<div id="content"><h1>Puppet Class: confdroid_selinux::main::files</h1> <div id="content"><h1>Puppet Class: cd_selinux::main::files</h1>
<div class="box_info"> <div class="box_info">
<dl> <dl>
<dt>Inherits:</dt> <dt>Inherits:</dt>
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd> <dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
</dl> </dl>
@@ -77,13 +77,13 @@
</div> </div>
<h2>Summary</h2> <h2>Summary</h2>
Class manages all configuration files required for confdroid_selinux. Class manages all configuration files required for cd_selinux.
<h2>Overview</h2> <h2>Overview</h2>
<div class="docstring"> <div class="docstring">
<div class="discussion"> <div class="discussion">
<p>confdroid_selinux::main::files.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p> <p>cd_selinux::main::files.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
</div> </div>
</div> </div>
@@ -123,10 +123,10 @@
<td> <td>
<pre class="code"><span class="info file"># File 'manifests/main/files.pp', line 6</span> <pre class="code"><span class="info file"># File 'manifests/main/files.pp', line 6</span>
class confdroid_selinux::main::files ( class cd_selinux::main::files (
) inherits confdroid_selinux::params { ) inherits cd_selinux::params {
require confdroid_selinux::main::dirs require cd_selinux::main::dirs
file { $sx_main_file: file { $sx_main_file:
ensure =&gt; file, ensure =&gt; file,

38
doc/puppet_classes/confdroid_selinux_3A_3Amain_3A_3Ainstall.html → doc/puppet_classes/cd_selinux_3A_3Amain_3A_3Ainstall.html
View File

@@ -4,7 +4,7 @@
<meta charset="utf-8"> <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<title> <title>
Puppet Class: confdroid_selinux::main::install Puppet Class: cd_selinux::main::install
&mdash; Documentation by YARD 0.9.36 &mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" /> <link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript"> <script type="text/javascript">
pathId = "puppet_classes::confdroid_selinux::main::install"; pathId = "puppet_classes::cd_selinux::main::install";
relpath = '../'; relpath = '../';
</script> </script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo; <a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span> <span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo; &raquo;
<span class="title">confdroid_selinux::main::install</span> <span class="title">cd_selinux::main::install</span>
</div> </div>
@@ -59,12 +59,12 @@
<div class="clear"></div> <div class="clear"></div>
</div> </div>
<div id="content"><h1>Puppet Class: confdroid_selinux::main::install</h1> <div id="content"><h1>Puppet Class: cd_selinux::main::install</h1>
<div class="box_info"> <div class="box_info">
<dl> <dl>
<dt>Inherits:</dt> <dt>Inherits:</dt>
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd> <dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
</dl> </dl>
@@ -78,13 +78,13 @@
<h2>Summary</h2> <h2>Summary</h2>
Class manage all aspects of installing binaries required for Class manage all aspects of installing binaries required for
confdroid_selinux cd_selinux
<h2>Overview</h2> <h2>Overview</h2>
<div class="docstring"> <div class="docstring">
<div class="discussion"> <div class="discussion">
<p>confdroid_selinux::main::install.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p> <p>cd_selinux::main::install.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
</div> </div>
</div> </div>
@@ -110,18 +110,30 @@ confdroid_selinux
12 12
13 13
14 14
15</pre> 15
16
17
18
19
20
21</pre>
</td> </td>
<td> <td>
<pre class="code"><span class="info file"># File 'manifests/main/install.pp', line 7</span> <pre class="code"><span class="info file"># File 'manifests/main/install.pp', line 7</span>
class confdroid_selinux::main::install ( class cd_selinux::main::install (
) inherits confdroid_selinux::params { ) inherits cd_selinux::params {
require confdroid_resources require cd_resources
package { $sx_reqpackages: package { $reqpackages_main:
ensure =&gt; $sx_pkg_ensure, ensure =&gt; $pkg_ensure,
}
if $sx_install_setools == true {
package { $reqpackages_tools:
ensure =&gt; $pkg_ensure,
}
} }
}</pre> }</pre>
</td> </td>

62
doc/puppet_classes/confdroid_selinux_3A_3Aparams.html → doc/puppet_classes/cd_selinux_3A_3Aparams.html
View File

@@ -4,7 +4,7 @@
<meta charset="utf-8"> <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<title> <title>
Puppet Class: confdroid_selinux::params Puppet Class: cd_selinux::params
&mdash; Documentation by YARD 0.9.36 &mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" /> <link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript"> <script type="text/javascript">
pathId = "puppet_classes::confdroid_selinux::params"; pathId = "puppet_classes::cd_selinux::params";
relpath = '../'; relpath = '../';
</script> </script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo; <a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span> <span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo; &raquo;
<span class="title">confdroid_selinux::params</span> <span class="title">cd_selinux::params</span>
</div> </div>
@@ -59,7 +59,7 @@
<div class="clear"></div> <div class="clear"></div>
</div> </div>
<div id="content"><h1>Puppet Class: confdroid_selinux::params</h1> <div id="content"><h1>Puppet Class: cd_selinux::params</h1>
<div class="box_info"> <div class="box_info">
@@ -67,13 +67,13 @@
<dt>Inherited by:</dt> <dt>Inherited by:</dt>
<dd> <dd>
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::confdroid_selinux::main::dirs (puppet_class)">confdroid_selinux::main::dirs</a></span><br/> <span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::cd_selinux::main::dirs (puppet_class)">cd_selinux::main::dirs</a></span><br/>
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::confdroid_selinux::main::files (puppet_class)">confdroid_selinux::main::files</a></span><br/> <span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::cd_selinux::main::files (puppet_class)">cd_selinux::main::files</a></span><br/>
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_selinux::main::config (puppet_class)">confdroid_selinux::main::config</a></span><br/> <span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::cd_selinux::main::config (puppet_class)">cd_selinux::main::config</a></span><br/>
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_selinux::main::install (puppet_class)">confdroid_selinux::main::install</a></span><br/> <span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::cd_selinux::main::install (puppet_class)">cd_selinux::main::install</a></span><br/>
</dd> </dd>
</dl> </dl>
@@ -87,14 +87,14 @@
</div> </div>
<h2>Summary</h2> <h2>Summary</h2>
Class holds all parameters for the confdroid_selinux module and is Class holds all parameters for the cd_selinux module and is
inherited by all classes except defines. inherited by all classes except defines.
<h2>Overview</h2> <h2>Overview</h2>
<div class="docstring"> <div class="docstring">
<div class="discussion"> <div class="discussion">
<p>confdroid_selinux::params.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p> <p>cd_selinux::params.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
</div> </div>
</div> </div>
@@ -107,7 +107,7 @@ inherited by all classes except defines.
<li> <li>
<span class='name'>sx_pkg_ensure</span> <span class='name'>pkg_ensure</span>
<span class='type'>(<tt>String</tt>)</span> <span class='type'>(<tt>String</tt>)</span>
@@ -125,18 +125,18 @@ inherited by all classes except defines.
<li> <li>
<span class='name'>sx_reqpackages</span> <span class='name'>sx_install_setools</span>
<span class='type'>(<tt>Array[String]</tt>)</span> <span class='type'>(<tt>Boolean</tt>)</span>
<em class="default">(defaults to: <tt>[&#39;selinux-policy&#39;,&#39;policycoreutils&#39;,&#39;setroubleshoot-server&#39;,&#39;policycoreutils-python-utils&#39;]</tt>)</em> <em class="default">(defaults to: <tt>false</tt>)</em>
&mdash; &mdash;
<div class='inline'> <div class='inline'>
<p>List of packages required for selinux management. The default list includes the following packages: <code>selinux-policy</code>, <code>policycoreutils</code>, <code>setroubleshoot-server</code>, <code>policycoreutils-python</code>.</p> <p>Whether to install additional selinux tools, i.e. for troubleshooting.</p>
</div> </div>
</li> </li>
@@ -188,6 +188,8 @@ inherited by all classes except defines.
<pre class="lines"> <pre class="lines">
21
22
23 23
24 24
25 25
@@ -212,35 +214,39 @@ inherited by all classes except defines.
44 44
45 45
46 46
47</pre> 47
48</pre>
</td> </td>
<td> <td>
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 23</span> <pre class="code"><span class="info file"># File 'manifests/params.pp', line 21</span>
class confdroid_selinux::params ( class cd_selinux::params (
Array[String] $sx_reqpackages = [&#39;selinux-policy&#39;,&#39;policycoreutils&#39;,&#39;setroubleshoot-server&#39;,&#39;policycoreutils-python-utils&#39;], String $pkg_ensure = &#39;latest&#39;,
String $sx_pkg_ensure = &#39;latest&#39;,
Boolean $sx_install_setools = false,
String $sx_selinux_status = &#39;enforcing&#39;, String $sx_selinux_status = &#39;enforcing&#39;,
String $sx_selinux_type = &#39;targeted&#39;, String $sx_selinux_type = &#39;targeted&#39;,
) { ) {
# default facts # installation section
$fqdn = $facts[&#39;networking&#39;][&#39;fqdn&#39;] $reqpackages_main = $::operatingsystem ? {
$hostname = $facts[&#39;networking&#39;][&#39;hostname&#39;] /(?i-mx:centos|fedora|redhat)/ =&gt; [&#39;selinux-policy&#39;,&#39;policycoreutils&#39;],
$domain = $facts[&#39;networking&#39;][&#39;domain&#39;] }
$os_name = $facts[&#39;os&#39;][&#39;name&#39;]
$os_release = $facts[&#39;os&#39;][&#39;release&#39;][&#39;major&#39;] $reqpackages_tools = $::operatingsystem ? {
/(?i-mx:centos|fedora|redhat)/ =&gt; [&#39;setroubleshoot-server&#39;,&#39;policycoreutils-python&#39;],
}
# directories # directories
$sx_main_dir = &#39;/etc/selinux&#39; $sx_main_dir = &#39;/etc/selinux&#39;
# files # files
$sx_main_file = &quot;${sx_main_dir}/config&quot; $sx_main_file = &quot;${sx_main_dir}/config&quot;
$sx_main_file_erb = &#39;confdroid_selinux/main/selinux_config.erb&#39; $sx_main_file_erb = &#39;cd_selinux/main/selinux_config.erb&#39;
# includes must be last # includes must be last
include confdroid_selinux::main::config include cd_selinux::main::config
}</pre> }</pre>
</td> </td>
</tr> </tr>

12
manifests/init.pp
View File

@@ -1,8 +1,8 @@
## confdroid_selinux::init.pp ## cd_selinux::init.pp
# Module name: confdroid_selinux # Module name: cd_selinux
# Author: 12ww1160 (12ww1160@confdroid.com) # Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary Class initializes the confdroid_selinux Module. # @summary Class initializes the cd_selinux Module.
############################################################################## ##############################################################################
class confdroid_selinux { class cd_selinux {
include confdroid_selinux::params include cd_selinux::params
} }

16
manifests/main/config.pp
View File

@@ -1,19 +1,19 @@
## confdroid_selinux::main::config.pp ## cd_selinux::main::config.pp
# Module name: confdroid_selinux # Module name: cd_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com) # Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary Class manages the module logic for confdroid_selinux. # @summary Class manages the module logic for cd_selinux.
############################################################################## ##############################################################################
class confdroid_selinux::main::config ( class cd_selinux::main::config (
) inherits confdroid_selinux::params { ) inherits cd_selinux::params {
include confdroid_selinux::main::files include cd_selinux::main::files
if $sx_selinux_status == 'enforcing' { if $sx_selinux_status == 'enforcing' {
exec { 'set_selinux_status': exec { 'set_selinux_status':
command => 'setenforce 1', command => 'setenforce 1',
path => ['/usr/sbin','/usr/bin'], path => ['/usr/sbin','/usr/bin'],
provider => shell, provider => shell,
unless => 'getenforce | grep -i "enforcing"', unless => 'getenforce | grep -i "enforcing"'
} }
} }
} }

14
manifests/main/dirs.pp
View File

@@ -1,12 +1,12 @@
## confdroid_selinux::main::dirs.pp ## cd_selinux::main::dirs.pp
# Module name: confdroid_selinux # Module name: cd_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com) # Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary Class manages all directories required for confdroid_selinux. # @summary Class manages all directories required for cd_selinux.
############################################################################### ###############################################################################
class confdroid_selinux::main::dirs ( class cd_selinux::main::dirs (
) inherits confdroid_selinux::params { ) inherits cd_selinux::params {
require confdroid_selinux::main::install require cd_selinux::main::install
file { $sx_main_dir: file { $sx_main_dir:
ensure => directory, ensure => directory,

14
manifests/main/files.pp
View File

@@ -1,12 +1,12 @@
## confdroid_selinux::main::files.pp ## cd_selinux::main::files.pp
# Module name: confdroid_selinux # Module name: cd_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com) # Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary Class manages all configuration files required for confdroid_selinux. # @summary Class manages all configuration files required for cd_selinux.
############################################################################## ##############################################################################
class confdroid_selinux::main::files ( class cd_selinux::main::files (
) inherits confdroid_selinux::params { ) inherits cd_selinux::params {
require confdroid_selinux::main::dirs require cd_selinux::main::dirs
file { $sx_main_file: file { $sx_main_file:
ensure => file, ensure => file,

24
manifests/main/install.pp
View File

@@ -1,15 +1,21 @@
## confdroid_selinux::main::install.pp ## cd_selinux::main::install.pp
# Module name: confdroid_selinux # Module name: cd_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com) # Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary Class manage all aspects of installing binaries required for # @summary Class manage all aspects of installing binaries required for
# confdroid_selinux # cd_selinux
############################################################################### ###############################################################################
class confdroid_selinux::main::install ( class cd_selinux::main::install (
) inherits confdroid_selinux::params { ) inherits cd_selinux::params {
require confdroid_resources require cd_resources
package { $sx_reqpackages: package { $reqpackages_main:
ensure => $sx_pkg_ensure, ensure => $pkg_ensure,
}
if $sx_install_setools == true {
package { $reqpackages_tools:
ensure => $pkg_ensure,
}
} }
} }

41
manifests/params.pp
View File

@@ -1,15 +1,13 @@
## confdroid_selinux::params.pp ## cd_selinux::params.pp
# Module name: confdroid_selinux # Module name: cd_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com) # Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary Class holds all parameters for the confdroid_selinux module and is # @summary Class holds all parameters for the cd_selinux module and is
# inherited by all classes except defines. # inherited by all classes except defines.
# @param [String] sx_pkg_ensure # @param [String] pkg_ensure
# which [package type](https://confdroid.com/2017/05/puppet-type-package/) # which [package type](https://confdroid.com/2017/05/puppet-type-package/)
# to choose, i.e. `latest` or `present`. # to choose, i.e. `latest` or `present`.
# @param [Array[String]] sx_reqpackages # @param [Boolean] sx_install_setools Whether to install additional selinux
# List of packages required for selinux management. The default list includes # tools, i.e. for troubleshooting.
# the following packages: `selinux-policy`, `policycoreutils`,
# `setroubleshoot-server`, `policycoreutils-python`.
# @param [String] sx_selinux_status The desired selinux status. Used for both # @param [String] sx_selinux_status The desired selinux status. Used for both
# managing the configuration file as well as the command line (setenforce). # managing the configuration file as well as the command line (setenforce).
# Valid values are `enforcing` and `permissive`. While the configuration file # Valid values are `enforcing` and `permissive`. While the configuration file
@@ -20,28 +18,31 @@
# @param [String] sx_selinux_type The desired selinux type. Valid options are # @param [String] sx_selinux_type The desired selinux type. Valid options are
# `targeted`, `minimum` and `mls`. # `targeted`, `minimum` and `mls`.
############################################################################## ##############################################################################
class confdroid_selinux::params ( class cd_selinux::params (
Array[String] $sx_reqpackages = ['selinux-policy','policycoreutils','setroubleshoot-server','policycoreutils-python-utils'], String $pkg_ensure = 'latest',
String $sx_pkg_ensure = 'latest',
Boolean $sx_install_setools = false,
String $sx_selinux_status = 'enforcing', String $sx_selinux_status = 'enforcing',
String $sx_selinux_type = 'targeted', String $sx_selinux_type = 'targeted',
) { ) {
# default facts # installation section
$fqdn = $facts['networking']['fqdn'] $reqpackages_main = $::operatingsystem ? {
$hostname = $facts['networking']['hostname'] /(?i-mx:centos|fedora|redhat)/ => ['selinux-policy','policycoreutils'],
$domain = $facts['networking']['domain'] }
$os_name = $facts['os']['name']
$os_release = $facts['os']['release']['major'] $reqpackages_tools = $::operatingsystem ? {
/(?i-mx:centos|fedora|redhat)/ => ['setroubleshoot-server','policycoreutils-python'],
}
# directories # directories
$sx_main_dir = '/etc/selinux' $sx_main_dir = '/etc/selinux'
# files # files
$sx_main_file = "${sx_main_dir}/config" $sx_main_file = "${sx_main_dir}/config"
$sx_main_file_erb = 'confdroid_selinux/main/selinux_config.erb' $sx_main_file_erb = 'cd_selinux/main/selinux_config.erb'
# includes must be last # includes must be last
include confdroid_selinux::main::config include cd_selinux::main::config
} }

1
templates/main/selinux_config.erb
View File

@@ -1,7 +1,6 @@
################################################################################ ################################################################################
########## /etc/selinux/config managed by Puppet ########## ########## /etc/selinux/config managed by Puppet ##########
########## manual changes will be overwritten !!! ########## ########## manual changes will be overwritten !!! ##########
########## original file: https://3for.me/wdtuj ##########
################################################################################ ################################################################################
SELINUX=<%= @sx_selinux_status %> SELINUX=<%= @sx_selinux_status %>