confdroid/confdroid_selinux
1
0
Fork 0
Code Issues Projects Wiki Activity

Compare commits

base: confdroid:master
Branches Tags
confdroid:master
confdroid:1.0.0-4.2026
..
compare: confdroid:3f880a412ade28f32b416974d96f9f58067de26b
Branches Tags
confdroid:master
confdroid:1.0.0-4.2026

1 Commits
master ... 3f880a412a

Author SHA1 Message Date
Jenkins
3f880a412a Merge branch 'jenkins-build-3' into 'master' 
Auto-merge for build 3

See merge request puppet/cd_selinux!1
 2026-04-05 16:47:55 +02:00
20 changed files with 234 additions and 216 deletions
Expand all files Collapse all files

1
.gitignore vendored
View File

@@ -2,4 +2,3 @@
Gemfile.lock
FileList
.scannerwork
.vscode

3
.puppet-lint.rc
View File

@@ -1,3 +0,0 @@
--no-variable_scope-check
--no-top_scope_facts
--no-140chars-check

44
README.md
View File

@@ -1,13 +1,14 @@
# Readme
[![Build Status](https://jenkins.confdroid.com/buildStatus/icon?job=confdroid_selinux&style=plastic)](https://jenkins.confdroid.com/job/confdroid_selinux/)
[![Security Hotspots](https://sonarqube.confdroid.com/api/project_badges/measure?project=confdroid_selinux&metric=security_hotspots&token=sqb_cc73d9e100a7cda91c7f45b8a7690bd16498e852)](https://sonarqube.confdroid.com/dashboard?id=confdroid_selinux)
[![Build Status](https://jenkins.confdroid.com/buildStatus/icon?job=cd_selinux)](https://jenkins.confdroid.com/job/cd_selinux/)
[[_TOC_]]
## Synopsis
[Security-Enhanced Linux (SELinux)](https://en.wikipedia.org/wiki/Security-Enhanced_Linux) is a Linux kernel security module that provides a mechanism for supporting access control security policies.
`confdroid_selinux` is a Puppet module to automate installation, configuration and troubleshooting of selinux.
`cd_selinux` is a Puppet module to automate installation, configuration and troubleshooting of selinux.
## WARNING
@@ -17,12 +18,12 @@
Installation:
- install binaries required for selinux and related tools
* install binaries required for selinux and related tools
Configuration
- manage `/etc/sysconfig/selinux` file (file system permissions, selinux context, content)
- manage current selinux status (permissive,enforcing)
* manage `/etc/sysconfig/selinux` file (file system permissions, selinux context, content)
* manage current selinux status (permissive,enforcing)
## Repo Documentation
@@ -32,23 +33,23 @@ See the full Puppet documentation including parameters in `docs/index.html`.
All dependencies must be included in the catalogue.
- [confdroid_resources](https://sourcecode.confdroid.com/confdroid/confdroid_resources) for yum repo resources.
* [cd_resources](https://gitlab.confdroid.com/puppet/cd_resources) for yum repo resources.
## Deployment
- native Puppet deployment
* native Puppet deployment
via site.pp or nodes.pp
```ruby
node 'example.example.net' {
include confdroid_selinux
include cd_selinux
}
```
- through Foreman:
* through Foreman:
In order to apply parameters through Foreman, **confdroid_selinux::params*- must be added to the host or host group in question.
In order to apply parameters through Foreman, **__cd_selinux::params__** must be added to the host or host group in question.
See [more details about class deployment on Confdroid.com](https://confdroid.com/2017/05/deploying-our-puppet-modules/).
@@ -58,26 +59,25 @@ All files and directories are configured with correct selinux context. If selinu
## Known Problems
- Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will **not**- do the reboot for you to avoid unexpected outages.
* Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will **__not__** do the reboot for you to avoid unexpected outages.
## Support
- OS: Rocky 9 (any RHEL9-based OS should work, but Rocky has been tested)
- Puppet 8
* OS: CentOS 7
* Puppet 5,6
## Tests
- Puppet Lint
- excluded tests:
- `--no-variable_scope-check`: not applicable as we are inheriting parameters from params class. the lint check does not distinguish between facts and inherited parameters.
- Puppet Parser
- ERB Template Parser
- Sonar Quality Gate
* Puppet Lint
* excluded tests:
* `--no-variable_scope-check`: not applicable as we are inheriting parameters from params class. the lint check does not distinguish between facts and inherited parameters.
* Puppet Parser
* ERB Template Parser
* Sonar Quality Gate
## Contact Us
- [contact Us](https://confdroid.com/contact/)
- [Feedback Portal](https://feedback.confdroid.com/)
[contact Us](https://confdroid.com/contact/)
## Disclaimer

12
doc/_index.html
View File

@@ -69,32 +69,32 @@
<ul>
<li>
<span class='object_link'><a href="puppet_classes/confdroid_selinux.html" title="puppet_classes::confdroid_selinux (puppet_class)">confdroid_selinux</a></span>
<span class='object_link'><a href="puppet_classes/cd_selinux.html" title="puppet_classes::cd_selinux (puppet_class)">cd_selinux</a></span>
</li>
<li>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_selinux::main::config (puppet_class)">confdroid_selinux::main::config</a></span>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::cd_selinux::main::config (puppet_class)">cd_selinux::main::config</a></span>
</li>
<li>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::confdroid_selinux::main::dirs (puppet_class)">confdroid_selinux::main::dirs</a></span>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::cd_selinux::main::dirs (puppet_class)">cd_selinux::main::dirs</a></span>
</li>
<li>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::confdroid_selinux::main::files (puppet_class)">confdroid_selinux::main::files</a></span>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::cd_selinux::main::files (puppet_class)">cd_selinux::main::files</a></span>
</li>
<li>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_selinux::main::install (puppet_class)">confdroid_selinux::main::install</a></span>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::cd_selinux::main::install (puppet_class)">cd_selinux::main::install</a></span>
</li>
<li>
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span>
</li>

23
doc/file.README.html
View File

@@ -60,13 +60,15 @@
<div id="content"><div id='filecontents'>
<h1 id="label-Readme">Readme</h1>
<p><a href="https://jenkins.confdroid.com/job/confdroid_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=confdroid_selinux&amp;style=plastic"></a> <a href="https://sonarqube.confdroid.com/dashboard?id=confdroid_selinux"><img src="https://sonarqube.confdroid.com/api/project_badges/measure?project=confdroid_selinux&amp;metric=security_hotspots&amp;token=sqb_cc73d9e100a7cda91c7f45b8a7690bd16498e852"></a></p>
<p><a href="https://jenkins.confdroid.com/job/cd_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=cd_selinux"></a></p>
<p>[[<em>TOC</em>]]</p>
<h2 id="label-Synopsis">Synopsis</h2>
<p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p>
<p><code>confdroid_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
<p><code>cd_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
<h2 id="label-WARNING">WARNING</h2>
@@ -94,7 +96,7 @@
<p>All dependencies must be included in the catalogue.</p>
<ul><li>
<p><a href="https://sourcecode.confdroid.com/confdroid/confdroid_resources">confdroid_resources</a> for yum repo resources.</p>
<p><a href="https://gitlab.confdroid.com/puppet/cd_resources">cd_resources</a> for yum repo resources.</p>
</li></ul>
<h2 id="label-Deployment">Deployment</h2>
@@ -105,14 +107,14 @@
<p>via site.pp or nodes.pp</p>
<pre class="code ruby"><code class="ruby">node &#39;example.example.net&#39; {
include confdroid_selinux
include cd_selinux
}
</code></pre>
<ul><li>
<p>through Foreman:</p>
</li></ul>
<p>In order to apply parameters through Foreman, *<em>confdroid_selinux::params</em>- must be added to the host or host group in question.</p>
<p>In order to apply parameters through Foreman, <strong>cd_selinux::params</strong> must be added to the host or host group in question.</p>
<p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p>
@@ -122,14 +124,14 @@
<h2 id="label-Known+Problems">Known Problems</h2>
<ul><li>
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong>- do the reboot for you to avoid unexpected outages.</p>
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong> do the reboot for you to avoid unexpected outages.</p>
</li></ul>
<h2 id="label-Support">Support</h2>
<ul><li>
<p>OS: Rocky 9 (any RHEL9-based OS should work, but Rocky has been tested)</p>
<p>OS: CentOS 7</p>
</li><li>
<p>Puppet 8</p>
<p>Puppet 5,6</p>
</li></ul>
<h2 id="label-Tests">Tests</h2>
@@ -149,11 +151,8 @@
</li></ul>
<h2 id="label-Contact+Us">Contact Us</h2>
<ul><li>
<p><a href="https://confdroid.com/contact/">contact Us</a></p>
</li><li>
<p><a href="https://feedback.confdroid.com/">Feedback Portal</a></p>
</li></ul>
<h2 id="label-Disclaimer">Disclaimer</h2>

23
doc/index.html
View File

@@ -60,13 +60,15 @@
<div id="content"><div id='filecontents'>
<h1 id="label-Readme">Readme</h1>
<p><a href="https://jenkins.confdroid.com/job/confdroid_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=confdroid_selinux&amp;style=plastic"></a> <a href="https://sonarqube.confdroid.com/dashboard?id=confdroid_selinux"><img src="https://sonarqube.confdroid.com/api/project_badges/measure?project=confdroid_selinux&amp;metric=security_hotspots&amp;token=sqb_cc73d9e100a7cda91c7f45b8a7690bd16498e852"></a></p>
<p><a href="https://jenkins.confdroid.com/job/cd_selinux/"><img src="https://jenkins.confdroid.com/buildStatus/icon?job=cd_selinux"></a></p>
<p>[[<em>TOC</em>]]</p>
<h2 id="label-Synopsis">Synopsis</h2>
<p><a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux">Security-Enhanced Linux (SELinux)</a> is a Linux kernel security module that provides a mechanism for supporting access control security policies.</p>
<p><code>confdroid_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
<p><code>cd_selinux</code> is a Puppet module to automate installation, configuration and troubleshooting of selinux.</p>
<h2 id="label-WARNING">WARNING</h2>
@@ -94,7 +96,7 @@
<p>All dependencies must be included in the catalogue.</p>
<ul><li>
<p><a href="https://sourcecode.confdroid.com/confdroid/confdroid_resources">confdroid_resources</a> for yum repo resources.</p>
<p><a href="https://gitlab.confdroid.com/puppet/cd_resources">cd_resources</a> for yum repo resources.</p>
</li></ul>
<h2 id="label-Deployment">Deployment</h2>
@@ -105,14 +107,14 @@
<p>via site.pp or nodes.pp</p>
<pre class="code ruby"><code class="ruby">node &#39;example.example.net&#39; {
include confdroid_selinux
include cd_selinux
}
</code></pre>
<ul><li>
<p>through Foreman:</p>
</li></ul>
<p>In order to apply parameters through Foreman, *<em>confdroid_selinux::params</em>- must be added to the host or host group in question.</p>
<p>In order to apply parameters through Foreman, <strong>cd_selinux::params</strong> must be added to the host or host group in question.</p>
<p>See <a href="https://confdroid.com/2017/05/deploying-our-puppet-modules/">more details about class deployment on Confdroid.com</a>.</p>
@@ -122,14 +124,14 @@
<h2 id="label-Known+Problems">Known Problems</h2>
<ul><li>
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong>- do the reboot for you to avoid unexpected outages.</p>
<p>Systems reconfigured with selinux disabled require once a reboot for selinux to be enabled. This module will <strong>not</strong> do the reboot for you to avoid unexpected outages.</p>
</li></ul>
<h2 id="label-Support">Support</h2>
<ul><li>
<p>OS: Rocky 9 (any RHEL9-based OS should work, but Rocky has been tested)</p>
<p>OS: CentOS 7</p>
</li><li>
<p>Puppet 8</p>
<p>Puppet 5,6</p>
</li></ul>
<h2 id="label-Tests">Tests</h2>
@@ -149,11 +151,8 @@
</li></ul>
<h2 id="label-Contact+Us">Contact Us</h2>
<ul><li>
<p><a href="https://confdroid.com/contact/">contact Us</a></p>
</li><li>
<p><a href="https://feedback.confdroid.com/">Feedback Portal</a></p>
</li></ul>
<h2 id="label-Disclaimer">Disclaimer</h2>

24
doc/puppet_class_list.html
View File

@@ -36,44 +36,44 @@
<ul id="full_list" class="puppet_class">
<li id="object_puppet_classes::confdroid_selinux" class="odd">
<li id="object_puppet_classes::cd_selinux" class="odd">
<div class="item">
<span class='object_link'><a href="puppet_classes/confdroid_selinux.html" title="puppet_classes::confdroid_selinux (puppet_class)">confdroid_selinux</a></span>
<span class='object_link'><a href="puppet_classes/cd_selinux.html" title="puppet_classes::cd_selinux (puppet_class)">cd_selinux</a></span>
</div>
</li>
<li id="object_puppet_classes::confdroid_selinux::main::config" class="even">
<li id="object_puppet_classes::cd_selinux::main::config" class="even">
<div class="item">
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_selinux::main::config (puppet_class)">confdroid_selinux::main::config</a></span>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::cd_selinux::main::config (puppet_class)">cd_selinux::main::config</a></span>
</div>
</li>
<li id="object_puppet_classes::confdroid_selinux::main::dirs" class="odd">
<li id="object_puppet_classes::cd_selinux::main::dirs" class="odd">
<div class="item">
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::confdroid_selinux::main::dirs (puppet_class)">confdroid_selinux::main::dirs</a></span>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::cd_selinux::main::dirs (puppet_class)">cd_selinux::main::dirs</a></span>
</div>
</li>
<li id="object_puppet_classes::confdroid_selinux::main::files" class="even">
<li id="object_puppet_classes::cd_selinux::main::files" class="even">
<div class="item">
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::confdroid_selinux::main::files (puppet_class)">confdroid_selinux::main::files</a></span>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::cd_selinux::main::files (puppet_class)">cd_selinux::main::files</a></span>
</div>
</li>
<li id="object_puppet_classes::confdroid_selinux::main::install" class="odd">
<li id="object_puppet_classes::cd_selinux::main::install" class="odd">
<div class="item">
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_selinux::main::install (puppet_class)">confdroid_selinux::main::install</a></span>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::cd_selinux::main::install (puppet_class)">cd_selinux::main::install</a></span>
</div>
</li>
<li id="object_puppet_classes::confdroid_selinux::params" class="even">
<li id="object_puppet_classes::cd_selinux::params" class="even">
<div class="item">
<span class='object_link'><a href="puppet_classes/confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span>
<span class='object_link'><a href="puppet_classes/cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span>
</div>
</li>

16
doc/puppet_classes/confdroid_selinux.html → doc/puppet_classes/cd_selinux.html
View File

@@ -4,7 +4,7 @@
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>
Puppet Class: confdroid_selinux
Puppet Class: cd_selinux
&mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript">
pathId = "puppet_classes::confdroid_selinux";
pathId = "puppet_classes::cd_selinux";
relpath = '../';
</script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo;
<span class="title">confdroid_selinux</span>
<span class="title">cd_selinux</span>
</div>
@@ -59,7 +59,7 @@
<div class="clear"></div>
</div>
<div id="content"><h1>Puppet Class: confdroid_selinux</h1>
<div id="content"><h1>Puppet Class: cd_selinux</h1>
<div class="box_info">
@@ -72,13 +72,13 @@
</div>
<h2>Summary</h2>
Class initializes the confdroid_selinux Module.
Class initializes the cd_selinux Module.
<h2>Overview</h2>
<div class="docstring">
<div class="discussion">
<p>confdroid_selinux::init.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@confdroid.com)</p>
<p>cd_selinux::init.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@confdroid.com)</p>
</div>
</div>
@@ -103,8 +103,8 @@
<td>
<pre class="code"><span class="info file"># File 'manifests/init.pp', line 6</span>
class confdroid_selinux {
include confdroid_selinux::params
class cd_selinux {
include cd_selinux::params
}</pre>
</td>
</tr>

22
doc/puppet_classes/confdroid_selinux_3A_3Amain_3A_3Aconfig.html → doc/puppet_classes/cd_selinux_3A_3Amain_3A_3Aconfig.html
View File

@@ -4,7 +4,7 @@
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>
Puppet Class: confdroid_selinux::main::config
Puppet Class: cd_selinux::main::config
&mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript">
pathId = "puppet_classes::confdroid_selinux::main::config";
pathId = "puppet_classes::cd_selinux::main::config";
relpath = '../';
</script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo;
<span class="title">confdroid_selinux::main::config</span>
<span class="title">cd_selinux::main::config</span>
</div>
@@ -59,12 +59,12 @@
<div class="clear"></div>
</div>
<div id="content"><h1>Puppet Class: confdroid_selinux::main::config</h1>
<div id="content"><h1>Puppet Class: cd_selinux::main::config</h1>
<div class="box_info">
<dl>
<dt>Inherits:</dt>
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
</dl>
@@ -77,13 +77,13 @@
</div>
<h2>Summary</h2>
Class manages the module logic for confdroid_selinux.
Class manages the module logic for cd_selinux.
<h2>Overview</h2>
<div class="docstring">
<div class="discussion">
<p>confdroid_selinux::main::config.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
<p>cd_selinux::main::config.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
</div>
</div>
@@ -119,17 +119,17 @@
<td>
<pre class="code"><span class="info file"># File 'manifests/main/config.pp', line 6</span>
class confdroid_selinux::main::config (
class cd_selinux::main::config (
) inherits confdroid_selinux::params {
include confdroid_selinux::main::files
) inherits cd_selinux::params {
include cd_selinux::main::files
if $sx_selinux_status == &#39;enforcing&#39; {
exec { &#39;set_selinux_status&#39;:
command =&gt; &#39;setenforce 1&#39;,
path =&gt; [&#39;/usr/sbin&#39;,&#39;/usr/bin&#39;],
provider =&gt; shell,
unless =&gt; &#39;getenforce | grep -i &quot;enforcing&quot;&#39;,
unless =&gt; &#39;getenforce | grep -i &quot;enforcing&quot;&#39;
}
}
}</pre>

20
doc/puppet_classes/confdroid_selinux_3A_3Amain_3A_3Adirs.html → doc/puppet_classes/cd_selinux_3A_3Amain_3A_3Adirs.html
View File

@@ -4,7 +4,7 @@
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>
Puppet Class: confdroid_selinux::main::dirs
Puppet Class: cd_selinux::main::dirs
&mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript">
pathId = "puppet_classes::confdroid_selinux::main::dirs";
pathId = "puppet_classes::cd_selinux::main::dirs";
relpath = '../';
</script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo;
<span class="title">confdroid_selinux::main::dirs</span>
<span class="title">cd_selinux::main::dirs</span>
</div>
@@ -59,12 +59,12 @@
<div class="clear"></div>
</div>
<div id="content"><h1>Puppet Class: confdroid_selinux::main::dirs</h1>
<div id="content"><h1>Puppet Class: cd_selinux::main::dirs</h1>
<div class="box_info">
<dl>
<dt>Inherits:</dt>
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
</dl>
@@ -77,13 +77,13 @@
</div>
<h2>Summary</h2>
Class manages all directories required for confdroid_selinux.
Class manages all directories required for cd_selinux.
<h2>Overview</h2>
<div class="docstring">
<div class="discussion">
<p>confdroid_selinux::main::dirs.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
<p>cd_selinux::main::dirs.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
</div>
</div>
@@ -122,10 +122,10 @@
<td>
<pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 6</span>
class confdroid_selinux::main::dirs (
class cd_selinux::main::dirs (
) inherits confdroid_selinux::params {
require confdroid_selinux::main::install
) inherits cd_selinux::params {
require cd_selinux::main::install
file { $sx_main_dir:
ensure =&gt; directory,

20
doc/puppet_classes/confdroid_selinux_3A_3Amain_3A_3Afiles.html → doc/puppet_classes/cd_selinux_3A_3Amain_3A_3Afiles.html
View File

@@ -4,7 +4,7 @@
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>
Puppet Class: confdroid_selinux::main::files
Puppet Class: cd_selinux::main::files
&mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript">
pathId = "puppet_classes::confdroid_selinux::main::files";
pathId = "puppet_classes::cd_selinux::main::files";
relpath = '../';
</script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo;
<span class="title">confdroid_selinux::main::files</span>
<span class="title">cd_selinux::main::files</span>
</div>
@@ -59,12 +59,12 @@
<div class="clear"></div>
</div>
<div id="content"><h1>Puppet Class: confdroid_selinux::main::files</h1>
<div id="content"><h1>Puppet Class: cd_selinux::main::files</h1>
<div class="box_info">
<dl>
<dt>Inherits:</dt>
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
</dl>
@@ -77,13 +77,13 @@
</div>
<h2>Summary</h2>
Class manages all configuration files required for confdroid_selinux.
Class manages all configuration files required for cd_selinux.
<h2>Overview</h2>
<div class="docstring">
<div class="discussion">
<p>confdroid_selinux::main::files.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
<p>cd_selinux::main::files.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
</div>
</div>
@@ -123,10 +123,10 @@
<td>
<pre class="code"><span class="info file"># File 'manifests/main/files.pp', line 6</span>
class confdroid_selinux::main::files (
class cd_selinux::main::files (
) inherits confdroid_selinux::params {
require confdroid_selinux::main::dirs
) inherits cd_selinux::params {
require cd_selinux::main::dirs
file { $sx_main_file:
ensure =&gt; file,

38
doc/puppet_classes/confdroid_selinux_3A_3Amain_3A_3Ainstall.html → doc/puppet_classes/cd_selinux_3A_3Amain_3A_3Ainstall.html
View File

@@ -4,7 +4,7 @@
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>
Puppet Class: confdroid_selinux::main::install
Puppet Class: cd_selinux::main::install
&mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript">
pathId = "puppet_classes::confdroid_selinux::main::install";
pathId = "puppet_classes::cd_selinux::main::install";
relpath = '../';
</script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo;
<span class="title">confdroid_selinux::main::install</span>
<span class="title">cd_selinux::main::install</span>
</div>
@@ -59,12 +59,12 @@
<div class="clear"></div>
</div>
<div id="content"><h1>Puppet Class: confdroid_selinux::main::install</h1>
<div id="content"><h1>Puppet Class: cd_selinux::main::install</h1>
<div class="box_info">
<dl>
<dt>Inherits:</dt>
<dd><span class='object_link'><a href="confdroid_selinux_3A_3Aparams.html" title="puppet_classes::confdroid_selinux::params (puppet_class)">confdroid_selinux::params</a></span></dd>
<dd><span class='object_link'><a href="cd_selinux_3A_3Aparams.html" title="puppet_classes::cd_selinux::params (puppet_class)">cd_selinux::params</a></span></dd>
</dl>
@@ -78,13 +78,13 @@
<h2>Summary</h2>
Class manage all aspects of installing binaries required for
confdroid_selinux
cd_selinux
<h2>Overview</h2>
<div class="docstring">
<div class="discussion">
<p>confdroid_selinux::main::install.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
<p>cd_selinux::main::install.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
</div>
</div>
@@ -110,18 +110,30 @@ confdroid_selinux
12
13
14
15</pre>
15
16
17
18
19
20
21</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'manifests/main/install.pp', line 7</span>
class confdroid_selinux::main::install (
class cd_selinux::main::install (
) inherits confdroid_selinux::params {
require confdroid_resources
) inherits cd_selinux::params {
require cd_resources
package { $sx_reqpackages:
ensure =&gt; $sx_pkg_ensure,
package { $reqpackages_main:
ensure =&gt; $pkg_ensure,
}
if $sx_install_setools == true {
package { $reqpackages_tools:
ensure =&gt; $pkg_ensure,
}
}
}</pre>
</td>

70
doc/puppet_classes/confdroid_selinux_3A_3Aparams.html → doc/puppet_classes/cd_selinux_3A_3Aparams.html
View File

@@ -4,7 +4,7 @@
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>
Puppet Class: confdroid_selinux::params
Puppet Class: cd_selinux::params
&mdash; Documentation by YARD 0.9.36
@@ -15,7 +15,7 @@
<link rel="stylesheet" href="../css/common.css" type="text/css" />
<script type="text/javascript">
pathId = "puppet_classes::confdroid_selinux::params";
pathId = "puppet_classes::cd_selinux::params";
relpath = '../';
</script>
@@ -39,7 +39,7 @@
<a href="../_index.html">Index (c)</a> &raquo;
<span class='title'><span class='object_link'>Puppet Classes</span></span>
&raquo;
<span class="title">confdroid_selinux::params</span>
<span class="title">cd_selinux::params</span>
</div>
@@ -59,7 +59,7 @@
<div class="clear"></div>
</div>
<div id="content"><h1>Puppet Class: confdroid_selinux::params</h1>
<div id="content"><h1>Puppet Class: cd_selinux::params</h1>
<div class="box_info">
@@ -67,13 +67,13 @@
<dt>Inherited by:</dt>
<dd>
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::confdroid_selinux::main::dirs (puppet_class)">confdroid_selinux::main::dirs</a></span><br/>
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Adirs.html" title="puppet_classes::cd_selinux::main::dirs (puppet_class)">cd_selinux::main::dirs</a></span><br/>
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::confdroid_selinux::main::files (puppet_class)">confdroid_selinux::main::files</a></span><br/>
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Afiles.html" title="puppet_classes::cd_selinux::main::files (puppet_class)">cd_selinux::main::files</a></span><br/>
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_selinux::main::config (puppet_class)">confdroid_selinux::main::config</a></span><br/>
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::cd_selinux::main::config (puppet_class)">cd_selinux::main::config</a></span><br/>
<span class='object_link'><a href="confdroid_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_selinux::main::install (puppet_class)">confdroid_selinux::main::install</a></span><br/>
<span class='object_link'><a href="cd_selinux_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::cd_selinux::main::install (puppet_class)">cd_selinux::main::install</a></span><br/>
</dd>
</dl>
@@ -87,14 +87,14 @@
</div>
<h2>Summary</h2>
Class holds all parameters for the confdroid_selinux module and is
Class holds all parameters for the cd_selinux module and is
inherited by all classes except defines.
<h2>Overview</h2>
<div class="docstring">
<div class="discussion">
<p>confdroid_selinux::params.pp Module name: confdroid_selinux Author: 12ww1160 (12ww1160@ConfDroid.com)</p>
<p>cd_selinux::params.pp Module name: cd_selinux Author: Arne Teuke (arne_teuke@ConfDroid.com)</p>
</div>
</div>
@@ -107,7 +107,7 @@ inherited by all classes except defines.
<li>
<span class='name'>sx_pkg_ensure</span>
<span class='name'>pkg_ensure</span>
<span class='type'>(<tt>String</tt>)</span>
@@ -125,18 +125,18 @@ inherited by all classes except defines.
<li>
<span class='name'>sx_reqpackages</span>
<span class='name'>sx_install_setools</span>
<span class='type'>(<tt>Array[String]</tt>)</span>
<span class='type'>(<tt>Boolean</tt>)</span>
<em class="default">(defaults to: <tt>[&#39;selinux-policy&#39;,&#39;policycoreutils&#39;,&#39;setroubleshoot-server&#39;,&#39;policycoreutils-python-utils&#39;]</tt>)</em>
<em class="default">(defaults to: <tt>false</tt>)</em>
&mdash;
<div class='inline'>
<p>List of packages required for selinux management. The default list includes the following packages: <code>selinux-policy</code>, <code>policycoreutils</code>, <code>setroubleshoot-server</code>, <code>policycoreutils-python</code>.</p>
<p>Whether to install additional selinux tools, i.e. for troubleshooting.</p>
</div>
</li>
@@ -188,6 +188,8 @@ inherited by all classes except defines.
<pre class="lines">
21
22
23
24
25
@@ -212,35 +214,39 @@ inherited by all classes except defines.
44
45
46
47</pre>
47
48</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 23</span>
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 21</span>
class confdroid_selinux::params (
class cd_selinux::params (
Array[String] $sx_reqpackages = [&#39;selinux-policy&#39;,&#39;policycoreutils&#39;,&#39;setroubleshoot-server&#39;,&#39;policycoreutils-python-utils&#39;],
String $sx_pkg_ensure = &#39;latest&#39;,
String $sx_selinux_status = &#39;enforcing&#39;,
String $sx_selinux_type = &#39;targeted&#39;,
String $pkg_ensure = &#39;latest&#39;,
Boolean $sx_install_setools = false,
String $sx_selinux_status = &#39;enforcing&#39;,
String $sx_selinux_type = &#39;targeted&#39;,
) {
# default facts
$fqdn = $facts[&#39;networking&#39;][&#39;fqdn&#39;]
$hostname = $facts[&#39;networking&#39;][&#39;hostname&#39;]
$domain = $facts[&#39;networking&#39;][&#39;domain&#39;]
$os_name = $facts[&#39;os&#39;][&#39;name&#39;]
$os_release = $facts[&#39;os&#39;][&#39;release&#39;][&#39;major&#39;]
# installation section
$reqpackages_main = $::operatingsystem ? {
/(?i-mx:centos|fedora|redhat)/ =&gt; [&#39;selinux-policy&#39;,&#39;policycoreutils&#39;],
}
$reqpackages_tools = $::operatingsystem ? {
/(?i-mx:centos|fedora|redhat)/ =&gt; [&#39;setroubleshoot-server&#39;,&#39;policycoreutils-python&#39;],
}
# directories
$sx_main_dir = &#39;/etc/selinux&#39;
$sx_main_dir = &#39;/etc/selinux&#39;
# files
$sx_main_file = &quot;${sx_main_dir}/config&quot;
$sx_main_file_erb = &#39;confdroid_selinux/main/selinux_config.erb&#39;
$sx_main_file = &quot;${sx_main_dir}/config&quot;
$sx_main_file_erb = &#39;cd_selinux/main/selinux_config.erb&#39;
# includes must be last
include confdroid_selinux::main::config
include cd_selinux::main::config
}</pre>
</td>
</tr>

12
manifests/init.pp
View File

@@ -1,8 +1,8 @@
## confdroid_selinux::init.pp
# Module name: confdroid_selinux
# Author: 12ww1160 (12ww1160@confdroid.com)
# @summary Class initializes the confdroid_selinux Module.
## cd_selinux::init.pp
# Module name: cd_selinux
# Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary Class initializes the cd_selinux Module.
##############################################################################
class confdroid_selinux {
include confdroid_selinux::params
class cd_selinux {
include cd_selinux::params
}

16
manifests/main/config.pp
View File

@@ -1,19 +1,19 @@
## confdroid_selinux::main::config.pp
# Module name: confdroid_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary Class manages the module logic for confdroid_selinux.
## cd_selinux::main::config.pp
# Module name: cd_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary Class manages the module logic for cd_selinux.
##############################################################################
class confdroid_selinux::main::config (
class cd_selinux::main::config (
) inherits confdroid_selinux::params {
include confdroid_selinux::main::files
) inherits cd_selinux::params {
include cd_selinux::main::files
if $sx_selinux_status == 'enforcing' {
exec { 'set_selinux_status':
command => 'setenforce 1',
path => ['/usr/sbin','/usr/bin'],
provider => shell,
unless => 'getenforce | grep -i "enforcing"',
unless => 'getenforce | grep -i "enforcing"'
}
}
}

14
manifests/main/dirs.pp
View File

@@ -1,12 +1,12 @@
## confdroid_selinux::main::dirs.pp
# Module name: confdroid_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary Class manages all directories required for confdroid_selinux.
## cd_selinux::main::dirs.pp
# Module name: cd_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary Class manages all directories required for cd_selinux.
###############################################################################
class confdroid_selinux::main::dirs (
class cd_selinux::main::dirs (
) inherits confdroid_selinux::params {
require confdroid_selinux::main::install
) inherits cd_selinux::params {
require cd_selinux::main::install
file { $sx_main_dir:
ensure => directory,

14
manifests/main/files.pp
View File

@@ -1,12 +1,12 @@
## confdroid_selinux::main::files.pp
# Module name: confdroid_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary Class manages all configuration files required for confdroid_selinux.
## cd_selinux::main::files.pp
# Module name: cd_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary Class manages all configuration files required for cd_selinux.
##############################################################################
class confdroid_selinux::main::files (
class cd_selinux::main::files (
) inherits confdroid_selinux::params {
require confdroid_selinux::main::dirs
) inherits cd_selinux::params {
require cd_selinux::main::dirs
file { $sx_main_file:
ensure => file,

24
manifests/main/install.pp
View File

@@ -1,15 +1,21 @@
## confdroid_selinux::main::install.pp
# Module name: confdroid_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com)
## cd_selinux::main::install.pp
# Module name: cd_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary Class manage all aspects of installing binaries required for
# confdroid_selinux
# cd_selinux
###############################################################################
class confdroid_selinux::main::install (
class cd_selinux::main::install (
) inherits confdroid_selinux::params {
require confdroid_resources
) inherits cd_selinux::params {
require cd_resources
package { $sx_reqpackages:
ensure => $sx_pkg_ensure,
package { $reqpackages_main:
ensure => $pkg_ensure,
}
if $sx_install_setools == true {
package { $reqpackages_tools:
ensure => $pkg_ensure,
}
}
}

51
manifests/params.pp
View File

@@ -1,15 +1,13 @@
## confdroid_selinux::params.pp
# Module name: confdroid_selinux
# Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary Class holds all parameters for the confdroid_selinux module and is
## cd_selinux::params.pp
# Module name: cd_selinux
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary Class holds all parameters for the cd_selinux module and is
# inherited by all classes except defines.
# @param [String] sx_pkg_ensure
# @param [String] pkg_ensure
# which [package type](https://confdroid.com/2017/05/puppet-type-package/)
# to choose, i.e. `latest` or `present`.
# @param [Array[String]] sx_reqpackages
# List of packages required for selinux management. The default list includes
# the following packages: `selinux-policy`, `policycoreutils`,
# `setroubleshoot-server`, `policycoreutils-python`.
# @param [Boolean] sx_install_setools Whether to install additional selinux
# tools, i.e. for troubleshooting.
# @param [String] sx_selinux_status The desired selinux status. Used for both
# managing the configuration file as well as the command line (setenforce).
# Valid values are `enforcing` and `permissive`. While the configuration file
@@ -17,31 +15,34 @@
# commandline. Note that changing the active selinux status from `disabled`
# to any the other types requires a manual reboot to re-label the file system.
# This module does not do that for you to avoid unexpected outages.
# @param [String] sx_selinux_type The desired selinux type. Valid options are
# @param [String] sx_selinux_type The desired selinux type. Valid options are
# `targeted`, `minimum` and `mls`.
##############################################################################
class confdroid_selinux::params (
class cd_selinux::params (
Array[String] $sx_reqpackages = ['selinux-policy','policycoreutils','setroubleshoot-server','policycoreutils-python-utils'],
String $sx_pkg_ensure = 'latest',
String $sx_selinux_status = 'enforcing',
String $sx_selinux_type = 'targeted',
String $pkg_ensure = 'latest',
Boolean $sx_install_setools = false,
String $sx_selinux_status = 'enforcing',
String $sx_selinux_type = 'targeted',
) {
# default facts
$fqdn = $facts['networking']['fqdn']
$hostname = $facts['networking']['hostname']
$domain = $facts['networking']['domain']
$os_name = $facts['os']['name']
$os_release = $facts['os']['release']['major']
# installation section
$reqpackages_main = $::operatingsystem ? {
/(?i-mx:centos|fedora|redhat)/ => ['selinux-policy','policycoreutils'],
}
$reqpackages_tools = $::operatingsystem ? {
/(?i-mx:centos|fedora|redhat)/ => ['setroubleshoot-server','policycoreutils-python'],
}
# directories
$sx_main_dir = '/etc/selinux'
$sx_main_dir = '/etc/selinux'
# files
$sx_main_file = "${sx_main_dir}/config"
$sx_main_file_erb = 'confdroid_selinux/main/selinux_config.erb'
$sx_main_file = "${sx_main_dir}/config"
$sx_main_file_erb = 'cd_selinux/main/selinux_config.erb'
# includes must be last
include confdroid_selinux::main::config
include cd_selinux::main::config
}

3
templates/main/selinux_config.erb
View File

@@ -1,7 +1,6 @@
################################################################################
########## /etc/selinux/config managed by Puppet ##########
########## manual changes will be overwritten !!! ##########
########## original file: https://3for.me/wdtuj ##########
########## manual changes will be overwritten !!! ##########
################################################################################
SELINUX=<%= @sx_selinux_status %>