[PATCH aeolus] Do not alter selinux rules when selinux is disabled

[Angus Thomas]

From: Angus Thomas

---
 recipes/apache/manifests/init.pp |    4 +++-
 1 files changed, 3 insertions(+), 1 deletions(-)

diff --git a/recipes/apache/manifests/init.pp b/recipes/apache/manifests/init.pp
index 79f15f9..dbecbf8 100644
--- a/recipes/apache/manifests/init.pp
+++ b/recipes/apache/manifests/init.pp
@@ -12,7 +12,9 @@ class apache {
   # if selinux is enabled and we want to use mod_proxy, we need todo this
   exec{'permit-http-networking':
          command => '/usr/sbin/setsebool httpd_can_network_connect 1',
-         logoutput => true }
+         logoutput => true,
+         unless   => "/usr/bin/test 'Disabled' = `/usr/sbin/getenforce`"
+  }

service { "httpd":
    	ensure     => running,

[Tomas Sedovic]

On 04/20/2011 09:37 AM, [e-mail] wrote:
> From: Angus Thomas
>
> recipes/apache/manifests/init.pp |    4 +++-
>   1 files changed, 3 insertions(+), 1 deletions(-)
>
> diff --git a/recipes/apache/manifests/init.pp b/recipes/apache/manifests/init.pp
> index 79f15f9..dbecbf8 100644
> --- a/recipes/apache/manifests/init.pp
> +++ b/recipes/apache/manifests/init.pp
> @@ -12,7 +12,9 @@ class apache {
>     # if selinux is enabled and we want to use mod_proxy, we need todo this
>     exec{'permit-http-networking':
>            command =>  '/usr/sbin/setsebool httpd_can_network_connect 1',
>     logoutput =>  true }
>     logoutput =>  true,
>     unless   =>  "/usr/bin/test 'Disabled' = `/usr/sbin/getenforce`"
>
> }
>
> service { "httpd":
>  ensure     =>  running,

ACK

[Francesco Vollero]

Ack'd 
On Wed, Apr 20, 2011 at 08:37:45AM +0100, [e-mail] wrote:
> From: Angus Thomas
>
> recipes/apache/manifests/init.pp |    4 +++-
>  1 files changed, 3 insertions(+), 1 deletions(-)
>
> diff --git a/recipes/apache/manifests/init.pp b/recipes/apache/manifests/init.pp
> index 79f15f9..dbecbf8 100644
> --- a/recipes/apache/manifests/init.pp
> +++ b/recipes/apache/manifests/init.pp
> @@ -12,7 +12,9 @@ class apache {
>    # if selinux is enabled and we want to use mod_proxy, we need todo this
>    exec{'permit-http-networking':
>           command => '/usr/sbin/setsebool httpd_can_network_connect 1',
>     logoutput => true }
>     logoutput => true,
>     unless   => "/usr/bin/test 'Disabled' = `/usr/sbin/getenforce`"
>
> }
>
> service { "httpd":
>  ensure     => running,
>
> -- 
> 1.7.4.4
>
> aeolus-devel mailing list
> [e-mail]
> https://fedorahosted.org/mailman/listinfo/aeolus-devel