Fixed selinux contexts from syslog datadirectories.
This commit is contained in:
parent
3ba3bc2842
commit
ee89b2a20b
1 changed files with 24 additions and 8 deletions
|
@ -148,10 +148,11 @@ class syslog::standalone {
|
|||
|
||||
if $syslog_datadir {
|
||||
file { $syslog_datadir:
|
||||
ensure => directory,
|
||||
mode => 2750,
|
||||
owner => "root",
|
||||
group => $group,
|
||||
ensure => directory,
|
||||
mode => 2750,
|
||||
owner => "root",
|
||||
group => $group,
|
||||
seltype => "var_log_t",
|
||||
}
|
||||
file { "/srv/log":
|
||||
ensure => link,
|
||||
|
@ -159,13 +160,15 @@ class syslog::standalone {
|
|||
owner => "root",
|
||||
group => $group,
|
||||
require => File[$syslog_datadir],
|
||||
seltype => "var_log_t",
|
||||
}
|
||||
} else {
|
||||
file { "/srv/log":
|
||||
ensure => directory,
|
||||
mode => 2750,
|
||||
owner => "root",
|
||||
group => $group,
|
||||
ensure => directory,
|
||||
mode => 2750,
|
||||
owner => "root",
|
||||
group => $group,
|
||||
seltype => "var_log_t",
|
||||
}
|
||||
}
|
||||
|
||||
|
@ -206,6 +209,19 @@ class syslog::standalone {
|
|||
default: { fail("Unknown \$syslog_type '$syslog_type'") }
|
||||
}
|
||||
|
||||
if "${selinux}" == "true" {
|
||||
selinux::manage_fcontext { "/srv/log(/all\.log)?":
|
||||
type => "var_log_t",
|
||||
before => File["/srv/log"],
|
||||
}
|
||||
if $syslog_datadir {
|
||||
selinux::manage_fcontext { "${syslog_datadir}(/all\.log)?":
|
||||
type => "var_log_t",
|
||||
before => File[$syslog_datadir],
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
|
Loading…
Add table
Reference in a new issue