From: cdenneen Date: Wed, 7 Oct 2015 13:29:26 +0000 (-0400) Subject: Include osrelease check in selinux case statement X-Git-Tag: 1.8.0~30^2 X-Git-Url: https://review.fuel-infra.org/gitweb?a=commitdiff_plain;h=41fb626e1477de3368ca4db30ac32c5e380f5bd2;p=puppet-modules%2Fpuppetlabs-firewall.git Include osrelease check in selinux case statement --- diff --git a/manifests/linux/redhat.pp b/manifests/linux/redhat.pp index 54b591c..9e5ad18 100644 --- a/manifests/linux/redhat.pp +++ b/manifests/linux/redhat.pp @@ -61,7 +61,12 @@ class firewall::linux::redhat ( # Redhat 7 selinux user context for /etc/sysconfig/iptables is set to unconfined_u case $::selinux { #lint:ignore:quoted_booleans - 'true',true: { $seluser = 'unconfined_u' } + 'true',true: { + case $::operatingsystemrelease { + /^7.*/: { $seluser = 'unconfined_u' } + default: { $seluser = 'system_u' } + } + } #lint:endignore default: { $seluser = undef } }