Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

github.com/voxpupuli/puppet-selinux

Puppet Module to manage SELinux on RHEL machines
https://github.com/voxpupuli/puppet-selinux

Update CHANGELOG for 1.2.0

701c273f33a0067a48dfe4a485dff23e3dce990f authored over 7 years ago by Thomas Mueller <[email protected]>
Bump metadata.json version to 1.2.0

ed33bf02f5c98ebec294beae8eaad0d7ffae9a6f authored over 7 years ago by Thomas Mueller <[email protected]>
Merge pull request #226 from vinzent/puppet5_compatability

Declare Puppet 5 compatability

49aaa2cc4d9b9668a07090330ea5d1266b54f030 authored over 7 years ago by Tim Meusel <[email protected]>
Exclude a restorecon test with $HOME in name

rspec-puppet started 2.6.0 to fail this test:

Could not parse for environment rp_env: Illegal v...

03b36ec222ed9ec08b39c41d36d6264f81ad7128 authored over 7 years ago by Thomas Mueller <[email protected]>
Update travis config to test with puppet 5

69c1efd74c9d1757777fbe6f828fa69317ace861 authored over 7 years ago by Thomas Mueller <[email protected]>
Declare Puppet 5 comptatability

85ba3e1766c200bd9b7f811c0bc93a5ea78c3aff authored over 7 years ago by Thomas Mueller <[email protected]>
Merge pull request #222 from voxpupuli/modulesync

modulesync 0.21.3

ffb8ab837eb3d996b981ef5da5c05e63a0dc97fc authored over 7 years ago by David Hollinger III <[email protected]>
rubocop: autofix

c5180bfadddab7ed60b66b4c7e8bae681b7f6c66 authored over 7 years ago by Tim Meusel <[email protected]>
bump to minimal recommended puppet version

3e90196b18175de827d58e380c05cd4dd5e0abdf authored over 7 years ago by Tim Meusel <[email protected]>
modulesync 0.21.3

02ec01767e9b93664e78f1c19b867f973be94cdf authored over 7 years ago by Tim Meusel <[email protected]>
[blacksmith] Bump version to 1.1.1-rc0

c18c78a0f971c21965a8622751b7978bc3dde482 authored over 7 years ago by Jarkko Oranen <[email protected]>
Merge pull request #219 from oranenj/release_110

Release 1.1.0

3d812accc8ae8c95e5be7b105052675d6e1e8a4e authored over 7 years ago by Tim Meusel <[email protected]>
Changelog for 1.1.0

f1ccb24747a49e3b4ff30b20319b8fdbc373faea authored over 7 years ago by Jarkko Oranen <[email protected]>
Generate strings docs for 1.1.0

2ebf9f0d8be10d66eae085fded371f4f3cb0e20a authored over 7 years ago by Jarkko Oranen <[email protected]>
[blacksmith] Bump version to 1.1.0

e4eb4e3c4d3c56e91823b47a92da05b885fdc1f2 authored over 7 years ago by Jarkko Oranen <[email protected]>
Merge pull request #218 from logic/fedora26

Fedora 26 uses the same package_name as Fedora 25

339f83069ac88401e24016308f65b174a85a30f3 authored over 7 years ago by Jarkko Oranen <[email protected]>
Make Fedora 24+ the new default package_name.

2a72713cd3b27e7609ea6d4535f5d5e4c7003698 authored over 7 years ago by Ed Marshall <[email protected]>
modulesync 0.21.1 (#213)

* modulesync 0.21.1
* Disable BeforeAfterAll lints, specs handle cleanup.

955997930d6fbfa4f594d02602044e20abd4e3bb authored over 7 years ago by Tim Meusel <[email protected]>
Merge pull request #216 from oranenj/tmp_dir

Ensure the module build tmp/ directory is actually a directory

0942937b442ba52b2a6b1fcf212be03f7168d59d authored over 7 years ago by David Hollinger III <[email protected]>
Merge pull request #217 from oranenj/remove_vardir_fact

Make use of the stdlib puppet_vardir fact instead of a custom one

394ddfabaa1e4be92cb79ae6ab89cc33b2bf0bf8 authored over 7 years ago by David Hollinger III <[email protected]>
Fedora 26 uses the same package_name as Fedora 25.

2cf0ad06f100f5bbd680f1c0cfb7152dbb04f772 authored over 7 years ago by Ed Marshall <[email protected]>
Make use of the stdlib puppet_vardir fact instead of a custom one

36a6b4f1ed540595d67257a972032a605c6321fa authored over 7 years ago by Jarkko Oranen <[email protected]>
Ensure the module build tmp/ directory is actually a directory

Fixes #215

094a47bfc3b9a81cb0bfe561f501bfc25b5a1607 authored over 7 years ago by Jarkko Oranen <[email protected]>
Merge pull request #214 from lightoze/master

Allow specifying module content inline

3299890294de67ac0ff363b83775d89b27f7c501 authored over 7 years ago by Jarkko Oranen <[email protected]>
Add missing documentation and an example

1524228ac661dd6b6b509662cea331bbeca21553 authored over 7 years ago by Vladimir Kulev <[email protected]>
Inline content tests and a bugfix

91f6ae63301402b0ac3c6f4553e6d5f855be253b authored over 7 years ago by Vladimir Kulev <[email protected]>
Allow specifying module content inline

efc4982460255ae053f23b5708d0971e8d7fffa5 authored over 7 years ago by Vladimir Kulev <[email protected]>
[blacksmith] Bump version to 1.0.1-rc0

2b9bbc46507b83deee6bf56d137d40e930ea3c37 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Merge pull request #211 from oranenj/prepare-1.0.0

Prepare 1.0.0

ad97dae218d38b918c8e7b348fc65458e2529b37 authored almost 8 years ago by Tim Meusel <[email protected]>
Generate change log for 1.0.0

885d97b4586d589cac1c84ab3cbeac0cd7f94231 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Regenerate documentation for 1.0.0

67bef51ac45794d8641339150679bc9840964d29 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Bump version to 1.0.0

49234a207554c9bf1a75f8c2d10709cbd5790ed8 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Merge pull request #210 from oranenj/fcontext_removal

Actually pass ensure to the wrapped selinux_fcontext resource

b73092b5fb07513ddbc40115d24cbafeeb9d52a5 authored almost 8 years ago by Tim Meusel <[email protected]>
Merge pull request #205 from oranenj/exec_restorecon

Add a convenience wrapper for restorecon execs

feaaa5588eccd193c1345b3cf1f1c7ebbf53993b authored almost 8 years ago by Jarkko Oranen <[email protected]>
Actually pass ensure to the wrapped selinux_fcontext resource

47ac0383c184f1af9729e2579a065cdac531882d authored almost 8 years ago by Jarkko Oranen <[email protected]>
Merge pull request #209 from oranenj/ordering_fix

Fix resource reference issue when removing fcontexts

ecea11d896cc6feb8e422613a9022c2c735d4279 authored almost 8 years ago by yastupin <[email protected]>
Fix resource reference issue when removing fcontexts

29ebc1a188ad30998f4ec28f1302ad82af6c5d9f authored almost 8 years ago by Jarkko Oranen <[email protected]>
Add a convenience wrapper for restorecon execs

This wraps restorecon execution so that it will execute
after all other SELinux changes have bee...

ce95b59e34311680d644776d49ad616d80b0d3f4 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Merge pull request #206 from oranenj/remove_restorecond

BREAKING: Remove restorecond management support

7c8bf65243d71f2c083ee5412dcee50e9789a580 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Remove restorecond management support

I don't think this is even used on modern systems, and the value of the
manifest is dubious. Doe...

01a0649648fa81e6ccae90ac5b0df003ac29aa3f authored almost 8 years ago by Jarkko Oranen <[email protected]>
Merge pull request #208 from oranenj/fix_lint

Fix new puppet-lint complaints about ordering arrows

0352f4f0c72bba94dc415852128d5a30bf64fd6b authored almost 8 years ago by Tim Meusel <[email protected]>
Fix lint issues

2740a1638107528b19e9e7e42684edfcd36e9061 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Merge pull request #204 from oranenj/doc_fixes

Doc fixes

cb8cd8f63a8071bc8976177b2491fb7594a31345 authored almost 8 years ago by Thomas Mueller <[email protected]>
Add a hint about changed interfaces

ed64816f4747bc068042fb5d428ffa64b238e8f3 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Fix fcontext example in docstring

741052834fd62f6b3f280ef8a373ded4c2c86e6a authored almost 8 years ago by Jarkko Oranen <[email protected]>
Merge pull request #203 from ardrigh/targeted_typo

Fix spelling for supported type in README

0e29eabea7a899c649be199216c2121ab6f61b59 authored almost 8 years ago by Thomas Mueller <[email protected]>
Fix spelling for supported type in README

11a7932fe8c2136fdc6af1b0ba619820d861fca4 authored almost 8 years ago by Dagan McGregor <[email protected]>
Merge pull request #202 from voxpupuli/modulesync

modulesync 0.20.1

989c38e600dd4978f0ce488e8b340b225235dcca authored almost 8 years ago by Thomas Mueller <[email protected]>
modulesync 0.20.1

3692a4563c1c2ee073a23363e2630bca5c41cce4 authored almost 8 years ago by Tim Meusel <[email protected]>
Merge pull request #201 from bastelfreak/puppet4

replace all validate functions with datatypes

2d343fc02fe7dcea1b5d48bd87828a5cb9f81f17 authored almost 8 years ago by yastupin <[email protected]>
replace all validate functions with datatypes

bumping stdlib to 4.13.1 was also requiered, to get the absolutepath
datatype

1f0e5776108153b115ebaabf96d35f5d36738e9e authored almost 8 years ago by Tim Meusel <[email protected]>
Update strings docs (#197)

Includes the changes in selinux::module

bad1c5b04d8c81af2d4e060090aaf2fd899162b6 authored almost 8 years ago by Thomas Mueller <[email protected]>
Merge pull request #198 from oranenj/boolean_types

Convert selinux::boolean to puppet types

7983f147fbfbbd3ed92e7d8b967aa29fd518c492 authored almost 8 years ago by Thomas Mueller <[email protected]>
Convert selinux::boolean to puppet types

f6763625faf73276c10f64d892ccc7283c83039b authored almost 8 years ago by Jarkko Oranen <[email protected]>
Merge pull request #195 from vinzent/module_refactor_refpolicy_test

Redesign selinux::module defined type

836e3ae84b8de0838bc763415efa0a881189f764 authored almost 8 years ago by Thomas Mueller <[email protected]>
Build modules in one directory

If multiple refpolicy style modules are built and
interfaces are used they need to reside in the...

a3457ac8cf470643bfe98d5502a1dd2a91553702 authored almost 8 years ago by Thomas Mueller <[email protected]>
Refactor module building to be more robust

This commit also introduces an alternative 'simple' builder to
refpolicy, and consequently the '...

996319d69bab6b319aa1a0d2f40fe70dc164476e authored almost 8 years ago by Jarkko Oranen <[email protected]>
Merge pull request #196 from voxpupuli/modulesync

modulesync 0.20.0

f76be0fab140fb5ec6ce3f440b2b3e468f1e50d7 authored almost 8 years ago by sacres <[email protected]>
modulesync 0.20.0

7763a30633af733a6bb83e39e3ee4eed50a811ff authored almost 8 years ago by Tim Meusel <[email protected]>
Merge pull request #194 from vinzent/remove_obsoleted_fedora_centos_spec_checks

Remove tests for Fedora 19-23 and CentOS 5

cc223863412ff8a6b0d1b20cef71c1072295095f authored almost 8 years ago by Dennis Hoppe <[email protected]>
Remove tests for Fedora 19-23 and CentOS 5

These distro versions are not supported anymore.

28ab3e2214d88c9c607f868f88ea530c14b3bc6a authored almost 8 years ago by Thomas Mueller <[email protected]>
Merge pull request #193 from vinzent/remove_amazonlinux_support

Remove Amazon Linux support

fe420753e28abd6f59ea81af4cc4ec6293491db5 authored almost 8 years ago by David Hollinger III <[email protected]>
Remove Amazon Linux support

I wasn't able to enable SELinux on Amazon Linux 2016.09. and
the version referd in params.pp doe...

030bfdbedb64c443a45181399b3d0ba5c588e68c authored almost 8 years ago by Thomas Mueller <[email protected]>
Merge pull request #191 from vinzent/update_docs

Fix puppet strings warnings and minor README.md update

f3a86c66dfd192db4c191f60dc84484d07ad67bf authored almost 8 years ago by Tim Meusel <[email protected]>
Fix puppet strings warnings and minor README.md update

Puppet 3.8.7 was specified in README.md but this is now Puppet 4 only.

4ab2cca1caec354970ac05afb5199121783df8ba authored almost 8 years ago by Thomas Mueller <[email protected]>
Add centos 6 and 7 distro upstream beaker nodesets

ae1abe9108149f2c1834f3916ace4e6dafa0576f authored almost 8 years ago by Thomas Mueller <[email protected]>
Merge pull request #192 from vinzent/190_remove_legacy_distro_from_metadata_json

Remove support for EL5 and Fedora < 24

b97673a533b4aeaf8fdf67893466bed55c4cb6ea authored almost 8 years ago by Tim Meusel <[email protected]>
Remove support for EL5 and Fedora < 24

We only can run acceptance tests against supported upstream distros.

Right now our acceptance t...

db5ec4d00f784295da23ee04bdaf0da2fb196638 authored almost 8 years ago by Thomas Mueller <[email protected]>
Merge pull request #174 from oranenj/selinux_port_type

Add a selinux_port type and provider

421bf9378bbb1088e4d67d68a51eb7d44c863fb6 authored almost 8 years ago by Thomas Mueller <[email protected]>
Fix the documentation and example a bit

35ac77878a85e475726b820923ee282da2b9b9dc authored almost 8 years ago by Jarkko Oranen <[email protected]>
Remove 'ipv4' and 'ipv6' as supported protocols

semanage doesn't seem to accept these. Are they actually used
anywhere?

9ae6fb5b0ac677851c525d799ed1936089e9dd1d authored almost 8 years ago by Jarkko Oranen <[email protected]>
Detect python3 semanage for Fedora compatibility

c1e292695c481421db076a04dd09595401fda4d5 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Add some initial spec tests for selinux_port

a595355e516936f280213902a17b073461d8af72 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Add caveat about port ranges to README

1f44f6d0f608869aac24a3e265a3e3c0e9ff51da authored almost 8 years ago by Jarkko Oranen <[email protected]>
Change port interface to support ranges explicitly

a37e74b6d3d97f91c37ad0bbf669471e2262c856 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Use a python script helper and libsemanage directly to read ports

This lowers the runtime on a no-op purge run from ~9 seconds to
~1.5 seconds on centos 6, and fr...

67f41a551986b808a044f9648a16009828603405 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Fix hiera lookup tests

782217086ec7256a5eb26219c7cc9e3506bf8214 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Fix acceptance tests

f519c24c38fa99360e62fffe755cacdf2e507568 authored almost 8 years ago by Jarkko Oranen <[email protected]>
selinux_port: rename context -> seltype (like in File)

4e48dfdd90187fdd41c74d8f4cb51414260af27e authored almost 8 years ago by Jarkko Oranen <[email protected]>
Document selinux_port behaviour in README

859cc7351977693f6d22b6ca2a0da86b886edf15 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Use types in port.pp

5eefda8d8f868c256ca0a5bbbccee0352f52eaf1 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Use new selinux_port type

051589a90c556ae712334db78e39e1b1674a9553 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Fix tests for selinux::port

No point in checking for execs anymore, and tcp6/udp6 are not
even correct to begin with.

4876550bfcacbbb8d0ee4d0121001cb9727b934a authored almost 8 years ago by Jarkko Oranen <[email protected]>
Implement a selinux_port type and provider via semanage

This initial implementation seems to work as expected. The provider
will fail if trying to remov...

5d33efd7e3a1c8ccade478d684eefa53534bd940 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Merge pull request #183 from oranenj/selinux_permissive_type

Selinux permissive type

0554cd3a204256994e26af73fec16fddec708ad7 authored almost 8 years ago by Thomas Mueller <[email protected]>
Merge pull request #177 from oranenj/selinux_fcontext_type

Add selinux_fcontext and selinux_fcontext_equivalence types

adb8cd452f9c8571a206c123c6f02001c4a2e11e authored almost 8 years ago by Thomas Mueller <[email protected]>
Merge pull request #175 from oranenj/downgrade_enforcing_when_disabled

Downgrade enforcing to permissive configuration when SELinux is disabled

1c5344e35b8dc20a6846dad30fe016aa41aebc87 authored almost 8 years ago by Thomas Mueller <[email protected]>
Use libselinux for providers and directly parse text files

89172d19be89228d4d39464110abec929c8fb18e authored almost 8 years ago by Jarkko Oranen <[email protected]>
Acceptance tests

8094b16666b21fb7160bba194f3963c1e1887a64 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Add some spec tests for the semanage provider.

1229e4c09d236959a501835f8419c45f4150e121 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Use the selinux_permissive type in the manifest

22541f11a7721538be7e7c9acaa300a33163cfda authored almost 8 years ago by Jarkko Oranen <[email protected]>
Add acceptance tests for selinux::fcontext

0b4a314885886505c854e0a39cb6e4a527d6869c authored almost 8 years ago by Jarkko Oranen <[email protected]>
Simplify selinux::fcontext interface (WIP)

a82eb90db06ac2c67142185592f5f2859668f9d9 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Add selinux::fcontext::equivalence

f34eb2ce7b403a95077e347230e77cc3486d5f3f authored almost 8 years ago by Jarkko Oranen <[email protected]>
Some specs for the providers

f841a6d100624786a998b8c1bf1175afb488381f authored almost 8 years ago by Jarkko Oranen <[email protected]>
Use File resource terminology

7950460c30a5efd75abb351d71603b59803781d2 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Restore support for older semanage versions

7629cd568317b982f18626eb899b45d4f35d1230 authored almost 8 years ago by Jarkko Oranen <[email protected]>
Make selinux::fcontext use the provider

9bc4fbf1f0368b892e92764020970171ead3e87f authored almost 8 years ago by Jarkko Oranen <[email protected]>
Add providers for selinux_fcontext and selinux_fcontext_equivalence

585941f8d10c2a34cf86fe27be4357f5d30954bb authored almost 8 years ago by Jarkko Oranen <[email protected]>
Add selinux_permissive type and provider

272de9b946f2b05bfb9e8e3ce1c011bffa8bea89 authored almost 8 years ago by Jarkko Oranen <[email protected]>