Completes re-add of SELinux support for puppet3 on EL7

diff --git a/manifests/linux/redhat.pp b/manifests/linux/redhat.pp
index b071727a2ed537510ceb062afb6bb0acd8d18188..8f38929430929ae5b18744fad545dbd6da421a34 100644 (file)
--- a/manifests/linux/redhat.pp
+++ b/manifests/linux/redhat.pp
@@ -71,12 +71,13 @@ class firewall::linux::redhat (
     File["/etc/sysconfig/${service_name}"] -> Service[$service_name]
 
     # Redhat 7 selinux user context for /etc/sysconfig/iptables is set to unconfined_u
+    # Redhat 7 selinux type context for /etc/sysconfig/iptables is set to etc_t
     case $::selinux {
       #lint:ignore:quoted_booleans
       'true',true: {
         case $::operatingsystemrelease {
-          /^(6|7)\..*/: { File["/etc/sysconfig/${service_name}"] { seluser => 'unconfined_u' } }
-          default:      { File["/etc/sysconfig/${service_name}"] { seluser => 'system_u' } }
+          /^(6|7)\..*/: { File["/etc/sysconfig/${service_name}"] { seluser => 'unconfined_u', seltype => 'etc_t' } }
+          default:      { File["/etc/sysconfig/${service_name}"] { seluser => 'system_u', seltype => 'system_conf_t' } }
         }
       }
       default:     {}