Forge Home

selinux_types

SELinux types

Brett Lentz

blentz

28,109 downloads

28,109 latest version

3.8 quality score

Version information

  • 0.1.0 (latest)
released Apr 10th 2014

Start using this module

Tags: selinux

Documentation

blentz/selinux_types — version 0.1.0 Apr 10th 2014

Usage

These types only require that /usr/sbin/semanage be installed.

Types

selinux_fcontext

Creates, deletes, and modifies the SELinux file context rules database. Note that it will not automatically initiate a filesystem relabel after it completes, but you can of course have your selinux_fcontext resources refresh an exec to handle that if you want that behavior.

Example:

selinux_fcontext { '/usr/lib(64)?/nagios/plugins/check_disk':
  ensure   => 'present',
  selrange => 's0.c1023',
  seltype  => 'nagios_unconfined_plugin_exec_t',
  seluser  => 'root',
}

selinux_port

Creates, deletes, and modifies the SELinux network port type definitions. It accepts proto tcp/udp and port (range) between 1-65535.

Example:

selinux_port { 'tcp/8080-8085':
  seltype => 'http_port_t',
}

selinux_port { 'udp/53':
  seltype => 'dns_port_t',
}