Add SELinux

Antonio Terceiro
1 parent aebfbe16
Showing 2 changed files with 15 additions and 0 deletions Show diff stats
cookbooks/basics/files/default/selinux_config
cookbooks/basics/recipes/default.rb
@@ -0,0 +1,4 @@
+# MANAGED WITH CHEF. DO NOT CHANGE BY HAND
+
+SELINUX=enforcing
+SELINUXTYPE=targeted
 # enable EPEL repository by default
 package 'epel-release'
+# replicate production security setup
+package 'selinux-policy'
+package 'policycoreutils-python'
+cookbook_file '/etc/selinux/config' do
+  source  'selinux_config'
+  owner   'root'
+  group   'root'
+  mode    0644
+end
+execute 'setenforce Enforcing'
+
 package 'vim'
 package 'bash-completion'
 package 'rsyslog'
@@ -0,0 +1,4 @@		@@ -0,0 +1,4 @@
	1	+# MANAGED WITH CHEF. DO NOT CHANGE BY HAND
	2	+
	3	+SELINUX=enforcing
	4	+SELINUXTYPE=targeted
1	# enable EPEL repository by default	1	# enable EPEL repository by default
2	package 'epel-release'	2	package 'epel-release'
3		3
		4	+# replicate production security setup
		5	+package 'selinux-policy'
		6	+package 'policycoreutils-python'
		7	+cookbook_file '/etc/selinux/config' do
		8	+ source 'selinux_config'
		9	+ owner 'root'
		10	+ group 'root'
		11	+ mode 0644
		12	+end
		13	+execute 'setenforce Enforcing'
		14	+
4	package 'vim'	15	package 'vim'
5	package 'bash-completion'	16	package 'bash-completion'
6	package 'rsyslog'	17	package 'rsyslog'