Added define to manage SELinux file contexts.

selinux/manifests/init.pp

@@ -60,7 +60,7 @@ class selinux {
         },
         path    => "/bin:/usr/bin:/sbin:/usr/sbin",
         unless  => "getenforce | egrep -i '${selinux_type}'",
-        require => file["/etc/selinux/config"],
+        require => File["/etc/selinux/config"],
     }
     
 }
@@ -90,6 +90,31 @@ define selinux::boolean($value) {
 }
 
 
+# Configure SELinux file contexts
+#
+# === Parameters
+#
+#   $name:
+#       Regexp of path to configure
+#   $type:
+#       SELinux type for file
+#
+# === Sample usage
+#
+# selinux::manage_fcontext { "/srv/www/http(/.*)?":
+#     type => "httpd_sys_content_t",
+# }
+#
+define selinux::manage_fcontext($type) {
+
+    exec { "semanage fcontext -a -t '${type}' '${name}' && restorecon -R `echo '${name}' | sed -e 's/(.*$//'`":
+        path   => "/bin:/usr/bin:/sbin:/usr/sbin",
+        unless => "matchpathcon `echo '${name}' | sed -e 's/(.*$//'` | egrep -q ':${type}:'",
+    }
+
+}
+
+
 # Configure SELinux port authorizations
 #
 # === Parameters