Merge "Explicitly set selinux seltype for rules link"
This commit is contained in:
commit
2f5ec4d79a
@ -125,11 +125,17 @@ class iptables(
|
||||
notify => $notify_iptables,
|
||||
}
|
||||
|
||||
if $::osfamily == 'redhat' {
|
||||
$seltype = 'etc_t'
|
||||
} else {
|
||||
$seltype = undef
|
||||
}
|
||||
|
||||
file { $::iptables::params::ipv4_rules:
|
||||
ensure => link,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0640',
|
||||
seltype => $seltype,
|
||||
target => "${::iptables::params::rules_dir}/rules",
|
||||
require => File["${::iptables::params::rules_dir}/rules"],
|
||||
notify => $notify_iptables,
|
||||
|
Loading…
x
Reference in New Issue
Block a user