Uploaded image for project: 'Puppet Agent'
  1. Puppet Agent
  2. PA-5227

selmodule should support the refresh event

    XMLWordPrintable

Details

    • New Feature
    • Status: Accepted
    • Normal
    • Resolution: Unresolved
    • None
    • None
    • selinux_core
    • EL8 (expected to be released 2019), Fedora 26+

    • Hide

      The selmodule provider reloads a selinux module when it receives a refresh event.

      Show
      The selmodule provider reloads a selinux module when it receives a refresh event.
    • Platform OS
    • Needs Assessment

    Description

      In the old days `semodule --list` provided the version of the modules loaded. Then this output was removed and now only lists the modules loaded.

      The new param `--list-modules=full` looks like this:

      # semodule --list-modules=full | head -n2
      200 container         pp         
      100 abrt              pp         
      ...
      

      where 200 is the priority of the module and pp the type (IMHO cil or pp is possible). Priority is there because you can have the same named module loaded multiple times and the higher priority wins.

      Anyway, this doesn't help puppet to determine what version of the module is loaded to determine if it needs to load the module again.

      I now wan't to reload the module if puppet changes the source of the module it manages. But right now the selmodule provider does not support sending a notify to reload the module:

      Test-case:

      exec { '/bin/true':
      }
      ~> selmodule { 'tomcat':
        ensure => 'present',
      }
      

      produces:

      # puppet apply /tmp/test.pp
      Notice: Compiled catalog for server in environment production in 0.06 seconds
      Notice: /Stage[main]/Main/Exec[/bin/true]/returns: executed successfully
      Notice: Applied catalog in 1.11 seconds
      

      It's not trying to reload the tomcat module.

      Attachments

        Activity

          People

            Unassigned Unassigned
            Raffaello Thomas Mueller
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:

              Zendesk Support