params class leaks wrong selinux context

[vchepkov]

params.pp sets the following SELinux context for all File resources on Redhat:

File {
  seltype => 'httpd_sys_content_t',
}

This attribute 'leaks' even to files that shouldn't have this context set, for example, /etc/httpd/conf.d/puppetboard.conf, which should have httpd_config_t.

In addition, I think module's attribute manage_selinux should also cover seltype, not just selbooleans

[bastelfreak]

Hi @vchepkov, thanks for bringing this up. Are you able to provide a fix for this bug?

[vchepkov]

I have slapped a couple of fixes for SELinux and it works for me, but I wouldn't know how to supply tests for this and usually this is where my fixes dies :( I can try though

[bastelfreak]

Just provide what you can and we work together through the tests. Also you can always ask questions in our IRC channel #voxpupuli on freenode or on https://puppetcommunity.slack.com

[d1nuc0m]

@bastelfreak @vchepkov is this issue still valid? I can't even find params.pp :sweat_smile:

[kenyon]

params.pp was removed in commit 5b643d9e133ad544ba0e976b099b112571e0b8ae (#318) so I'll close this.