1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
|
# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_almalinux,multi_platform_rhv,SUSE Linux Enterprise 15
# reboot = false
# strategy = enable
# complexity = low
# disruption = low
{{% if product in ['ol8', 'ol9', 'rhel8', 'rhel9', 'rhel10'] %}}
{{{ bash_package_install("python3-libsemanage") }}}
{{% elif product == "sle15" %}}
{{{ bash_package_install("policycoreutils") }}}
{{{ bash_package_install("policycoreutils-python-utils") }}}
{{{ bash_package_install("selinux-tools") }}}
{{{ bash_package_install("python3-selinux") }}}
{{{ bash_package_install("python3-semanage") }}}
{{% else %}}
{{{ bash_package_install("libsemanage-python") }}}
{{% endif %}}
if selinuxenabled || {{{ bash_bootc_build() }}} ; then
{{% if SEBOOL_BOOL %}}
setsebool -P {{{ SEBOOLID }}} {{{ SEBOOL_BOOL }}}
{{% else %}}
{{{ bash_instantiate_variables("var_" + SEBOOLID) }}}
setsebool -P {{{ SEBOOLID }}} $var_{{{ SEBOOLID }}}
{{% endif %}}
else
echo "Skipping remediation, SELinux is disabled";
false
fi
|