confdroid/puppet_cd
3
0
Fork 0
Code Wiki Activity

set seliux contexts for all files and directories - https://gitlab.confdroid.com/internal/confdroid_management/-/issues/292

Browse Source
This commit is contained in:
Arne Teuke
2025-11-02 14:39:12 +01:00
parent 9fb5422b4b
commit 1f43d95e12
1 changed files with 53 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
manifests/main/files.pp
View File

@@ -15,6 +15,10 @@ class puppet_cd::main::files (
owner => 'root', owner => 'root',
group => 'root', group => 'root',
mode => '0644', mode => '0644',
selrange => s0,
selrole => object_r,
seltype => puppet_etc_t,
seluser => system_u,
content => template($pt_puppet_conf_erb), content => template($pt_puppet_conf_erb),
notify => Service[$pt_agent_service], notify => Service[$pt_agent_service],
} }
@@ -44,6 +48,10 @@ class puppet_cd::main::files (
owner => 'root', owner => 'root',
group => 'root', group => 'root',
mode => '0644', mode => '0644',
selrange => s0,
selrole => object_r,
seltype => puppet_etc_t,
seluser => system_u,
content => template($pt_puppet_conf_erb), content => template($pt_puppet_conf_erb),
notify => Service[$pt_agent_service,$pt_server_service], notify => Service[$pt_agent_service,$pt_server_service],
} }
@@ -56,6 +64,10 @@ class puppet_cd::main::files (
owner => 'root', owner => 'root',
group => 'root', group => 'root',
mode => '0644', mode => '0644',
selrange => s0,
selrole => object_r,
seltype => puppet_etc_t,
seluser => system_u,
content => template($pt_puppetdb_conf_erb), content => template($pt_puppetdb_conf_erb),
notify => Service[$pt_agent_service,$pt_server_service], notify => Service[$pt_agent_service,$pt_server_service],
} }
@@ -66,6 +78,10 @@ class puppet_cd::main::files (
owner => 'root', owner => 'root',
group => 'root', group => 'root',
mode => '0644', mode => '0644',
selrange => s0,
selrole => object_r,
seltype => puppet_etc_t,
seluser => system_u,
content => template($pt_routes_erb), content => template($pt_routes_erb),
notify => Service[$pt_server_service], notify => Service[$pt_server_service],
} }
@@ -74,6 +90,7 @@ class puppet_cd::main::files (
owner => 'puppet', owner => 'puppet',
group => 'puppet', group => 'puppet',
mode => '0550', mode => '0550',
selrange => s0,
selrole => object_r, selrole => object_r,
seltype => foreman_enc_t, seltype => foreman_enc_t,
seluser => system_u, seluser => system_u,