Defined Type: selinux::exec_restorecon
- Defined in:
- manifests/exec_restorecon.pp
Overview
selinux::exec_restorecon
A convenience wrapper around a restorecon exec
Will execute after all other SELinux changes have been applied, but before Anchor
14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 |
# File 'manifests/exec_restorecon.pp', line 14
define selinux::exec_restorecon(
Stdlib::Absolutepath $path = $title,
Boolean $refreshonly = true,
Boolean $recurse = true,
Optional[String] $unless = undef,
Optional[String] $onlyif = undef,
) {
include ::selinux
$command = $recurse ? {
true => 'restorecon -R',
false => 'restorecon',
}
exec {"selinux::exec_restorecon ${path}":
path => '/sbin:/usr/sbin',
command => sprintf('%s %s', $command, shellquote($path)),
refreshonly => $refreshonly,
unless => $unless,
onlyif => $onlyif,
before => Anchor['selinux::end'],
}
Anchor['selinux::module post'] -> Exec["selinux::exec_restorecon ${path}"]
}
|