summaryrefslogtreecommitdiffstats
path: root/manifests
diff options
context:
space:
mode:
authorJames Shubin <james@shubin.ca>2013-09-07 16:48:50 -0400
committerJames Shubin <james@shubin.ca>2013-09-07 16:56:52 -0400
commit7c2dc0cadc03bc5dd2da3155e5773ad4471563df (patch)
tree4420c7d9c1929f39a64f8394dc287b1ffc2f7e75 /manifests
parent231e4b9ff771d33514d78518e14fe13148e7b431 (diff)
downloadpuppet-gluster-7c2dc0cadc03bc5dd2da3155e5773ad4471563df.tar.gz
puppet-gluster-7c2dc0cadc03bc5dd2da3155e5773ad4471563df.tar.xz
puppet-gluster-7c2dc0cadc03bc5dd2da3155e5773ad4471563df.zip
Set proper selinux context and perms. Keep Dan Walsh from crying.
This avoids the constant flip flops you'll see during puppet runs. I think glusterd might be setting them correctly, but puppet kept changing them back to the default. All fixed now :)
Diffstat (limited to 'manifests')
-rw-r--r--manifests/host.pp8
1 files changed, 6 insertions, 2 deletions
diff --git a/manifests/host.pp b/manifests/host.pp
index 8a05292..9a31f97 100644
--- a/manifests/host.pp
+++ b/manifests/host.pp
@@ -29,7 +29,9 @@ define gluster::host(
content => template('gluster/glusterd.info.erb'),
owner => root,
group => root,
- mode => 644, # u=rw,go=r
+ mode => 600, # u=rw,go=r
+ seltype => 'glusterd_var_lib_t',
+ seluser => 'unconfined_u',
ensure => present,
require => File['/var/lib/glusterd/'],
}
@@ -78,7 +80,9 @@ define gluster::host(
owner => root,
group => root,
# NOTE: this mode was found by inspecting the process
- mode => 600, # u=rw,go=
+ mode => 600, # u=rw,go=r
+ seltype => 'glusterd_var_lib_t',
+ seluser => 'unconfined_u',
}
}
}