Merge pull request spiette#22 from djjudas21/selinux_status

Switch to a more robust way of changing SELinux status
cybercom-finland · Jan 15, 2015 · 8290992 · 8290992
2 parents d0c76ef + 4622a18
commit 8290992
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/manifests/config.pp b/manifests/config.pp
@@ -61,8 +61,9 @@
     }
 
     exec { "change-selinux-status-to-${mode}":
-      command => "echo ${sestatus} > /${::selinux::params::sx_fs_mount}/enforce",
-      unless  => "grep -q '${sestatus}' /${::selinux::params::sx_fs_mount}/enforce",
+      command => "setenforce ${sestatus}",
+      unless  => "getenforce | grep -qi ${mode}",
+      path    => '/bin:/usr/bin:/usr/sbin',
     }
   } else {
     fail("Invalid mode specified for SELinux: ${mode}")