Comments (7)
Hi. I don't think I support this kind of use case - installing a compiled module.
You can revert to the source files and use this resource, add the required functionality (we can think about what goes where together), or avoid using this resource and opt for an execute
resource for installing your pe
file.
LMK what you think
from selinux_policy.
Aha.
Use directory
and populate that directory using cookbook_file
If you think the documentation could explain it better, please LMK
from selinux_policy.
Yes! using directory
populated up front with a remote_directory
is working.
### Populate a remote working directory
remote_directory '/tmp/selinux-qas' do
source 'selinux-qas'
owner 'root'
group 'root'
mode '0755'
action :create
end
### Install the SELinux policies
if node['platform'] == 'redhat'
include_recipe 'selinux_policy::default'
selinux_policy_module 'sshdqas' do
directory '/tmp/selinux-qas'
action :install
end
end
Do you estimate it as an right way of working? If yes, I propose that a small note could be added in the doc to the directory attribute, and maybe add an extra example usage.
Anyway, I try to improve a bit my recipes by using .te
files in place of .pp
. Even I don't plan to edit those, it is still better to have the .te
files versioned in Git.
Thanks
from selinux_policy.
Voila, pull request on README.md done as draft for de doc change
from selinux_policy.
I personally dislike putting "compiled" stuff in my cookbook.
I support either:
- keeping the source in the cookbook and compiling it on the machine
- keeping the compiled result in an artifact store of some kind and pulling it from there
The first works with directory_source
, the second with directory
and something that puts files in that directory.
This is of course only my thought about doing stuff, and isn't necessarily the best way for everyone.
Happy to hear everything works. Will review your README modification
from selinux_policy.
+1 for your comment about keeping the .te
. It's just a better idea to keep the source, in case you DO want to modify something, rather than having "this is the binary can't regnerate it"
from selinux_policy.
This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.
from selinux_policy.
Related Issues (20)
- STDERR: find: paths must precede expression: 2>/dev/null HOT 13
- selinux_policy_boolean not persistent by default
- Amazon Linux 2 not supported HOT 5
- Dangerfile should use failure instead of fail HOT 1
- Remove .rubocop.yml with Dangerfile
- Update Changelog
- Run latest cookstyle
- Update builds to be parallel
- SE Port Management Fails on CentOS 8 HOT 2
- Amazon linux
- CentOS 8 Stream: selinux_policy_fcontext: Chef::Exceptions::InvalidCookbookVersion '8' does not match 'x.y.z' or 'x.y' HOT 1
- selinux_policy_module installation disallowed if selinux is disabled HOT 1
- Clarification on `allow_disabled` resource property
- The compat_resource cookbook has been deprecated HOT 2
- Continuous Integration Testing HOT 1
- sh: semanage: command not found HOT 7
- [BUG] CentOS 7.x find 4.5.11 has a fd leak in -execdir - Too many open files HOT 12
- ArgumentError with version 2.2.0 HOT 3
- setsebool - No such file or directory HOT 3
- RHEL 8 support? HOT 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from selinux_policy.