21 lines
475 B
Puppet
21 lines
475 B
Puppet
# profiles::selinux::nginx
|
|
# selinux settings for nginx
|
|
class profiles::selinux::nginx (
|
|
Boolean $persistent = true,
|
|
Boolean $httpd_can_network_connect = true,
|
|
String $selinux_mode = 'enforcing',
|
|
){
|
|
|
|
# setenforce
|
|
class { 'profiles::selinux::setenforce':
|
|
mode => $selinux_mode,
|
|
}
|
|
|
|
# make sure we can connect to network resources
|
|
selboolean { 'httpd_can_network_connect':
|
|
persistent => $persistent,
|
|
value => $httpd_can_network_connect,
|
|
}
|
|
}
|
|
|