Module: Chef::Util::Selinux

Includes:
Mixin::ShellOut, Mixin::Which
Included in:
Provider::File
Defined in:
lib/chef/util/selinux.rb

Overview

IMPORTANT: We assume that selinux utilities are installed on an selinux enabled server. Provisioning an selinux enabled server without selinux utilities is not supported.

Constant Summary collapse

@@selinux_enabled =

We want to initialize below variables once during a chef-client run therefore they are class variables.

nil
@@restorecon_path =
nil
@@selinuxenabled_path =
nil

Instance Method Summary collapse

Methods included from Mixin::Which

#where, #which

Methods included from Mixin::ShellOut

#a_to_s, #clean_array, #shell_out, #shell_out!, #shell_out_compact, #shell_out_compact!, #shell_out_compact_timeout, #shell_out_compact_timeout!, #shell_out_with_systems_locale, #shell_out_with_systems_locale!

Methods included from Mixin::PathSanity

#enforce_path_sanity, #sanitized_path

Instance Method Details

#restore_security_context(file_path, recursive = false) ⇒ Object


49
50
51
52
53
54
55
56
57
58
# File 'lib/chef/util/selinux.rb', line 49

def restore_security_context(file_path, recursive = false)
  if restorecon_path
    restorecon_command = recursive ? "#{restorecon_path} -R -r" : "#{restorecon_path} -R"
    restorecon_command += " \"#{file_path}\""
    Chef::Log.debug("Restoring selinux security content with #{restorecon_command}")
    shell_out!(restorecon_command)
  else
    Chef::Log.warn "Can not find 'restorecon' on the system. Skipping selinux security context restore."
  end
end

#selinux_enabled?Boolean


44
45
46
47
# File 'lib/chef/util/selinux.rb', line 44

def selinux_enabled?
  @@selinux_enabled = check_selinux_enabled? if @@selinux_enabled.nil?
  @@selinux_enabled
end