selboolean
: Manages SELinux
booleans on systems with SELinux support.selmodule
: Manages loading and
unloading of SELinux policy modules on the system. Requires SELinux
support.selboolean
The supported booleans are any of the ones found in
/selinux/booleans/
.
The following properties are available in the selboolean
type.
value
Valid values: on
, off
, true
,
false
Whether the SELinux boolean should be enabled or disabled. #{value_doc}
The following parameters are available in the selboolean
type.
name
namevar
The name of the SELinux boolean to be managed.
persistent
Valid values: true
, false
If set true, SELinux booleans will be written to disk and persist
across reboots. The default is false
.
Default value: false
provider
The specific backend to use for this selboolean
resource. You will seldom need to specify this --- Puppet will usually
discover the appropriate provider for your platform.
selmodule
See man semodule(8) for more information on SELinux policy modules.
Autorequires: If Puppet is managing the file
containing this SELinux policy module (which is either explicitly
specified in the selmodulepath
attribute or will be found
at {selmoduledir
}/{name
}.pp), the selmodule
resource will autorequire that file.
The following properties are available in the selmodule
type.
ensure
Valid values: present
, absent
The basic property that the resource should be in.
Default value: present
syncversion
Valid values: true
, false
If set to true
, the policy will be reloaded if the
version found in the on-disk file differs from the loaded version. If
set to false
(the default) the only check that will be made
is if the policy is loaded at all or not.
The following parameters are available in the selmodule
type.
name
namevar
The name of the SELinux policy to be managed. You should not include the customary trailing .pp extension.
provider
The specific backend to use for this selmodule
resource.
You will seldom need to specify this --- Puppet will usually discover
the appropriate provider for your platform.
selmoduledir
The directory to look for the compiled pp module file in. Currently
defaults to /usr/share/selinux/targeted
. If the
selmodulepath
attribute is not specified, Puppet will
expect to find the module in
<selmoduledir>/<name>.pp
, where
name
is the value of the name
parameter.
Default value: /usr/share/selinux/targeted
selmodulepath
The full path to the compiled .pp policy module. You only need to use
this if the module file is not in the selmoduledir
directory.