Skip to content

Commit

Permalink
AutoYaST: import the security policies
Browse files Browse the repository at this point in the history
  • Loading branch information
imobachgs committed Aug 10, 2022
1 parent 7f9716c commit e02397e
Showing 1 changed file with 12 additions and 0 deletions.
12 changes: 12 additions & 0 deletions src/modules/Security.rb
Expand Up @@ -801,6 +801,7 @@ def Import(settings)
settings["selinux_mode"] = settings.delete("SELINUX_MODE") if settings.key?("SELINUX_MODE")

import_lsm_config(settings)
import_security_policies(settings)

return true if settings == {}

Expand Down Expand Up @@ -938,6 +939,17 @@ def import_lsm_config(settings)
PackagesProposal.SetResolvables("LSM", :pattern, lsm_config.needed_patterns)
end

def import_security_policies(settings)
return unless settings["security_policies"].is_a?(Array)

settings["security_policies"].each do |policy_id|
policy = Y2Security::SecurityPolicy.find(policy_id.to_sym)
next unless policy

policy.enable
end
end

# Sets @missing_mandatory_services honoring the systemd aliases
def read_missing_mandatory_services
log.info("Checking mandatory services")
Expand Down

0 comments on commit e02397e

Please sign in to comment.