Puppet Class: selinux

Inherits:
selinux::params
Defined in:
manifests/init.pp

Overview

Class: selinux

Description

This class manages SELinux on RHEL based systems.

Parameters:

- $mode (enforcing|permissive|disabled) - sets the operating state for SELinux.
- $type (enforcing|permissive|disabled) - sets the operating state for SELinux.
- $sx_mod_dir (absolute_path) - sets the operating state for SELinux.
- $makefile (string) - the default makefile to use for module compilation
- $manage_package (boolean) - manage the package for selinux tools
- $package_name (string) - sets the name for the selinux tools package

Actions:

This module will configure SELinux and/or deploy SELinux based modules to running
system.

Requires:

- Class[stdlib]. This is Puppet Labs standard library to include additional methods for use within Puppet. [https://github.com/puppetlabs/puppetlabs-stdlib]

Sample Usage:

include selinux

Parameters:

  • mode (Any) (defaults to: $::selinux::params::mode)
  • type (Any) (defaults to: $::selinux::params::type)
  • sx_mod_dir (Any) (defaults to: $::selinux::params::sx_mod_dir)
  • makefile (Any) (defaults to: $::selinux::params::makefile)
  • manage_package (Any) (defaults to: $::selinux::params::manage_package)
  • package_name (Any) (defaults to: $::selinux::params::package_name)
  • selinux_booleans (Any) (defaults to: {})
  • selinux_modules (Any) (defaults to: {})
  • selinux_fcontexts (Any) (defaults to: {})
  • selinux_ports (Any) (defaults to: {}) 


24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
 
# File 'manifests/init.pp', line 24

class selinux (
  $mode           = $::selinux::params::mode,
  $type           = $::selinux::params::type,
  $sx_mod_dir     = $::selinux::params::sx_mod_dir,
  $makefile       = $::selinux::params::makefile,
  $manage_package = $::selinux::params::manage_package,
  $package_name   = $::selinux::params::package_name,

  ### START Hiera Lookups ###
  $selinux_booleans = {},
  $selinux_modules = {},
  $selinux_fcontexts = {},
  $selinux_ports = {}
  ### END Hiera Lookups ###
) inherits selinux::params {

  $mode_real = $mode ? {
    /\w+/   => $mode,
    default => 'undef',
  }

  $type_real = $type ? {
    /\w+/   => $type,
    default => 'undef',
  }

  validate_absolute_path($sx_mod_dir)
  validate_re($mode_real, ['^enforcing$', '^permissive$', '^disabled$', '^undef$'], "Valid modes are enforcing, permissive, and disabled.  Received: ${mode}")
  validate_re($type_real, ['^targeted$', '^minimum$', '^mls$', '^undef$'], "Valid types are targeted, minimum, and mls.  Received: ${type}")
  validate_string($makefile)
  validate_bool($manage_package)
  validate_string($package_name)

  class { '::selinux::package':
    manage_package => $manage_package,
    package_name   => $package_name,
  } ->
  class { '::selinux::config': }

  create_resources('selinux::boolean', $selinux_booleans)
  create_resources('selinux::module', $selinux_modules)
  create_resources('selinux::fcontext', $selinux_fcontexts)
  create_resources('selinux::port', $selinux_ports)
}