Defined Type: selinux::boolean

Defined in:
manifests/boolean.pp

Overview

selinux::boolean

This class will set the state of an SELinux boolean.

Examples:

Enable named_write_master_zones boolean

selinux::boolean{ 'named_write_master_zones':
   ensure     => "on",
}

Ensure named_write_master_zones boolean is disabled

selinux::boolean{ 'named_write_master_zones':
   ensure     => "off",
}

Parameters:

  • ensure (Any) (defaults to: 'on')

    Set to on or off

  • persistent (Any) (defaults to: true)

    Set to false if you don't want it to survive a reboot.



18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
# File 'manifests/boolean.pp', line 18

define selinux::boolean (
  $ensure     = 'on',
  $persistent = true,
) {

  include ::selinux

  Anchor['selinux::module post'] ->
  Selinux::Boolean[$title] ->
  Anchor['selinux::end']

  $ensure_real = $ensure ? {
    true    => 'true', # lint:ignore:quoted_booleans
    false   => 'false', # lint:ignore:quoted_booleans
    default => $ensure,
  }

  validate_re($ensure_real, ['^on$', '^true$', '^present$', '^off$', '^false$', '^absent$'], 'Valid ensures must be one of on, true, present, off, false, or absent')
  validate_bool($persistent)

  $value = $ensure_real ? {
    /(?i-mx:on|true|present)/  => 'on',
    /(?i-mx:off|false|absent)/ => 'off',
    default                    => undef,
  }

  selboolean { $name:
    value      => $value,
    persistent => $persistent,
  }
}