Add SELinux

Antonio Terceiro
1 parent aebfbe16
Showing 2 changed files with 15 additions and 0 deletions Show diff stats
cookbooks/basics/files/default/selinux_config
cookbooks/basics/recipes/default.rb
@@ -0,0 +1,4 @@
+# MANAGED WITH CHEF. DO NOT CHANGE BY HAND
+
+SELINUX=enforcing
+SELINUXTYPE=targeted
 # enable EPEL repository by default
 package 'epel-release'
  
+# replicate production security setup
+package 'selinux-policy'
+package 'policycoreutils-python'
+cookbook_file '/etc/selinux/config' do
+  source  'selinux_config'
+  owner   'root'
+  group   'root'
+  mode    0644
+end
+execute 'setenforce Enforcing'
+
 package 'vim'
 package 'bash-completion'
 package 'rsyslog'
...	...	@@ -0,0 +1,4 @@
	1	+# MANAGED WITH CHEF. DO NOT CHANGE BY HAND
	2	+
	3	+SELINUX=enforcing
	4	+SELINUXTYPE=targeted
...	...
1	1	# enable EPEL repository by default
2	2	package 'epel-release'
3	3
	4	+# replicate production security setup
	5	+package 'selinux-policy'
	6	+package 'policycoreutils-python'
	7	+cookbook_file '/etc/selinux/config' do
	8	+ source 'selinux_config'
	9	+ owner 'root'
	10	+ group 'root'
	11	+ mode 0644
	12	+end
	13	+execute 'setenforce Enforcing'
	14	+
4	15	package 'vim'
5	16	package 'bash-completion'
6	17	package 'rsyslog'
...	...