(GH-147) Add ordering of resources
This change adds ordering of resources of this module. It enables to declare resources in different manifests without the need to care about ordering.
(GH-147) Test default resource ordering in acceptance test
Remove ordering of all `selinux::*` resources. This was not possible before the addition of the ordering.
Merge pull request #167 from vinzent/147_ordering_of_resources
(GH-147) Add ordering of resources
Merge pull request #171 from vinzent/doc_update
Document known problems / limitations
Generate puppet strings in docs/ folder
already in modulesync pipeline: voxpupuli/modulesync_config#304
Add redcarpet gem needed for puppet strings
Already in modulesync pipeline: voxpupuli/modulesync_config#304
Merge pull request #172 from vinzent/doc_update
Update inline doc to puppet-strings
Merge pull request #173 from vinzent/doc_update
Fix broken link to puppet strings documentation
Downgrade to permissive configuration when SELinux is disabled
This avoids configurations that could break when SELinux is enabled again. The user will be issued a warning if they are not already enforcing permissive mode
Merge pull request #176 from voxpupuli/modulesync
modulesync 0.19.0
Adapt required rubocop config change
Workaround for warning/errors: /voxpupuli/puppet-selinux/.rubocop.yml: Lint/Eval has the wrong namespace - should be Security Error: The `Style/MethodCallParentheses` cop has been renamed to `Style/MethodCallWithoutArgsParentheses`.
Merge pull request #182 from vinzent/rubocop_config_fixes
Rubocop config fixes
(GH-119) Don't accept udp6 and tcp6 as protocol name with selinux::port
Only udp and tcp are valid. ipv4 and ipv6 would be valid options too but it wasn't provided before. This change closes #119
(GH-148) Make use of class selinux parameters
Until now only hiera was queried for module, boolean, fcontext permissive and port parameters. In puppet manifest declared parameters we're not considered at all.
Use correct type in create_resource with permissive parameter
Permissive parameter tried to manage selinux::fcontext resources.
Merge pull request #181 from vinzent/119_validate_port_params
(GH-119) Don't accept udp6 and tcp6 as protocol name with selinux::port
Merge pull request #180 from vinzent/148_use_unused_class_params
(GH-148) Use declared parameters
Merge pull request #187 from voxpupuli/modulesync
modulesync 0.19.3
Merge pull request #175 from oranenj/downgrade_enforcing_when_disabled
Downgrade enforcing to permissive configuration when SELinux is disabled
Merge pull request #177 from oranenj/selinux_fcontext_type
Add selinux_fcontext and selinux_fcontext_equivalence types
Merge pull request #183 from oranenj/selinux_permissive_type
Selinux permissive type
Implement a selinux_port type and provider via semanage
This initial implementation seems to work as expected. The provider will fail if trying to remove entries defined in the system policy. The prefetch method feels like a hack, but I am not sure what the best way to map unique port/protocol pairs to catalog resources is. It must be done in order to use modify instead of add when there is an existing context definition.