blentz / puppet-selinux_types Goto Github PK

I may be doing it wrong, but I can't seem to get the symlink filetype working with your fcontext type.

Given the code below:

selinux_fcontext { '/var/lib/nfs':
ensure => present,
filetype => 'symbolic link',
seluser => 'system_u',
seltype => 'var_lib_nfs_t',
notify => Exec['run restorecon for /var/lib/nfs'],
}

I get the following error:

Error: /Stage[main]/Testmodule/Selinux_fcontext[/var/lib/nfs]: Could not evaluate: undefined method `[]' for nil:NilClass

I've tried with filetype => '-l' with the same result.

If I remove the filetype param entirely, it applies correctly.

The first puppet client run was successful. But the next prompted that error :
Error: Execution of '/usr/sbin/semanage port -a -t http_port_t -p tcp 8080-8085' returned 1:
Error: /Stage[main]/Selinux_rundeck_client/Selinux_port[tcp/8080-8085]/ensure: change from absent to present failed: Execution of '/usr/sbin/semanage port -a -t http_port_t -p tcp 8080-8085' returned 1:

I run it manually :
root@~]# /usr/sbin/semanage port -a -t http_port_t -p tcp 8080-8085
/usr/sbin/semanage: Port tcp/8080-8085 already defined

Hi Brett,

Found out your module, because needed a way to manage selinux ports within puppet. Adding ports works flawless, but removing (ensure absent) port definitions are being ignored. There are no errors or what so ever.

Would be cool if this could be managed to 👍

Greetings,
Rodehoed