puppet nftables

Révision 0b7bcb5d

Align filemode on RedHat to distro default

The RPM acutally ships the configuration and directory with
0600/0700 while this module sets the mode to 0640/0750.

However, this has the drawback that on new nftables RPM versions,
we are setting it back to the modules mode and triggering an nft
validate.

    context "on #{os}" do

      let(:facts) { os_facts }

      nft_mode = case os_facts[:os]['family']

                 when 'RedHat'

                   '0600'

                 else

                   '0640'

                 end

      context 'with snat4' do

        let(:pre_condition) do

          '

            path: '/etc/nftables/puppet-preflight/ip-nat-chain-POSTROUTING.nft',

            owner: 'root',

            group: 'root',

            mode: '0640',

            mode: nft_mode,

            ensure_newline: true

          )

        }

Formats disponibles : Unified diff