Fixed selinux contexts from syslog datadirectories.

This commit is contained in:
Timo Mkinen 2011-08-31 13:11:10 +03:00
parent 3ba3bc2842
commit ee89b2a20b

View file

@ -148,10 +148,11 @@ class syslog::standalone {
if $syslog_datadir { if $syslog_datadir {
file { $syslog_datadir: file { $syslog_datadir:
ensure => directory, ensure => directory,
mode => 2750, mode => 2750,
owner => "root", owner => "root",
group => $group, group => $group,
seltype => "var_log_t",
} }
file { "/srv/log": file { "/srv/log":
ensure => link, ensure => link,
@ -159,13 +160,15 @@ class syslog::standalone {
owner => "root", owner => "root",
group => $group, group => $group,
require => File[$syslog_datadir], require => File[$syslog_datadir],
seltype => "var_log_t",
} }
} else { } else {
file { "/srv/log": file { "/srv/log":
ensure => directory, ensure => directory,
mode => 2750, mode => 2750,
owner => "root", owner => "root",
group => $group, group => $group,
seltype => "var_log_t",
} }
} }
@ -206,6 +209,19 @@ class syslog::standalone {
default: { fail("Unknown \$syslog_type '$syslog_type'") } default: { fail("Unknown \$syslog_type '$syslog_type'") }
} }
if "${selinux}" == "true" {
selinux::manage_fcontext { "/srv/log(/all\.log)?":
type => "var_log_t",
before => File["/srv/log"],
}
if $syslog_datadir {
selinux::manage_fcontext { "${syslog_datadir}(/all\.log)?":
type => "var_log_t",
before => File[$syslog_datadir],
}
}
}
} }