65 lines
2.4 KiB
Puppet
65 lines
2.4 KiB
Puppet
## cd_selinux::params.pp
|
|
# Module name: cd_selinux
|
|
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
|
|
# # License:
|
|
# This file is part of cd_selinux.
|
|
#
|
|
# cd_selinux is used for providing automatic configuration of SELINUX.
|
|
# Copyright (C) 2016 ConfDroid (copyright@ConfDroid.com)
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
# @summary Class holds all parameters for the cd_selinux module and is
|
|
# inherited by all classes except defines.
|
|
# @param [string] pkg_ensure
|
|
# which [package type](https://confdroid.com/2017/05/puppet-type-package/)
|
|
# to choose, i.e. `latest` or `present`.
|
|
# @param [boolean] sx_install_setools Whether to install additional selinux
|
|
# tools, i.e. for troubleshooting.
|
|
# @param [string] sx_selinux_status The desired selinux status. Valid values
|
|
# are `enforcing`, ``permissive`, `disabled`. Note that changing from disabled
|
|
# to any othe other types requires a manual reboot to relable the file system.
|
|
# @param [string] sx_selinux_type The desired selinux type. Valid options are
|
|
# `targeted`, `minimum` and `mls`.
|
|
##############################################################################
|
|
class cd_selinux::params (
|
|
|
|
$pkg_ensure = 'latest',
|
|
|
|
$sx_install_setools = false,
|
|
$sx_selinux_status = 'enforcing',
|
|
$sx_selinux_type = 'targeted',
|
|
|
|
) {
|
|
|
|
# installation section
|
|
$reqpackages_main = $::operatingsystem ? {
|
|
/(?i-mx:centos|fedora|redhat)/ => ['selinux-policy','policycoreutils'],
|
|
}
|
|
|
|
$reqpackages_tools = $::operatingsystem ? {
|
|
/(?i-mx:centos|fedora|redhat)/ => ['setroubleshoot-server',
|
|
'policycoreutils-python'],
|
|
}
|
|
|
|
# directories
|
|
$sx_main_dir = '/etc/selinux'
|
|
|
|
# files
|
|
$sx_main_file = "${sx_main_dir}/config"
|
|
$sx_main_file_erb = 'cd_selinux/main/selinux_config.erb'
|
|
|
|
|
|
# includes must be last
|
|
include cd_selinux::main::config
|
|
}
|