| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
ACLs on directories
|
| |
|
|
|
|
|
|
|
| |
This is just a workaround to avoid a traceback; the real fix will
involve making the POSIX tool properly handle ACLs with no user/group
given, which refer to the current user/group of the file they apply
to.
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Added ability to specify initial content for a file that doesn't
exist, to avoid a messy situation where you'd have to probe for file
existence and either use a Path type="file" or Path type="augeas"
depending, and run Bcfg2 twice.
* All commands in an Augeas path are run if *any* of them fail to
verify. Previously, only commands that hadn't been run would be
installed, but that had issues, particularly with the Clear command,
which could pass verification but then be required during the
installation phase anyway.
* Miscellaneous bug fixes.
|
| |
|
| |
|
| |
|
|
|
|
| |
This mimics the behavior for "real" tools
|
| |
|
|
|
|
|
|
| |
When installing an entry with no ACLs specified, but with ACLs on the
file as it exists on the filesystem, the ACL mask was preserved, even
as the ACLs are deleted.
|
|
|
|
| |
Signed-off-by: Sol Jerome <sol.jerome@gmail.com>
|
|
|
|
|
|
|
|
| |
If you don't supply a mode to the selinux.matchpathcon() function, it
fails to properly look up the context in some circumstances related to
context patterns in the SELinux policy. This change looks up the mode
and supplies it to the function.
(cherry picked from commit 20a2c9a8fb6c6ecbed259b5deccb01c01bf3304f)
|
|
|
|
|
|
|
| |
Previously, when a bundle's contents were updated, all services listed
in the bundle were stopped if the status attribute was set to 'ignore'.
Signed-off-by: Sol Jerome <sol.jerome@gmail.com>
|
|
|
|
| |
Signed-off-by: Sol Jerome <sol.jerome@gmail.com>
|
|
|
|
| |
Signed-off-by: Sol Jerome <sol.jerome@gmail.com>
|
|
|
|
| |
Signed-off-by: Sol Jerome <sol.jerome@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
If the POSIX client tool is run as a non-root user, it is very
likely that the _set_perms() call in _makedirs() will fail because
it cannot set the owner of the newly-created directories. This
causes _makedirs() to return False, which in turn causes
POSIXFile.install() to bail out early.
Applying the reasoning in <https://github.com/Bcfg2/bcfg2/pull/108>
the freebie directories created by _makedirs should have mode and
ownership done on a best-effort basis. If a user needs parent
directories to have a specific ownership and mode, then they should
specify that directory in their configuration.
|
|\ |
|
| |
| |
| |
| |
| | |
Bootstatus is optional and should have the value of status if not specified.
This is handled by get_bootstatus.
|
| | |
|
|\ \
| | |
| | | |
Chkconfig should not set service to "on" on every run level
|
| | |
| | |
| | | |
Let chkconfig assign default runlevels.
|
|/ /
| |
| |
| | |
Signed-off-by: Sol Jerome <sol.jerome@gmail.com>
|
| | |
|
|/ |
|
|
|
|
|
|
|
| |
The get_bootstatus method has the correct logic to get the desired
result when bootstatus is unset.
Signed-off-by: Sol Jerome <sol.jerome@gmail.com>
|
|\
| |
| | |
Make the "latest" value more usable in VCS.py
|
| |
| |
| |
| | |
copy only when the working copy is not updated to the latest revision.
|
| |
| |
| |
| |
| |
| |
| | |
When status='ignore', set svcstatus to True so that the entry verifies
properly.
Signed-off-by: Sol Jerome <sol.jerome@gmail.com>
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
You can specify a refname (like refs/heads/master) as revision and you
will always get the current tree of this refname. During verify it is
checked if the ref had changed in the remote repo and if an "update"
is necessary.
|
| |
| |
| |
| |
| |
| |
| | |
Older version of dulwich will not create the directory (even
with mkdir=True) for the repository. So we cannot rely on it.
Because we clean existing folders before, we have to create
the directory in every case.
|
| |
| |
| |
| |
| | |
Add an option to specify whether a command should be executed within
a shell to enable flow control and other shell-specific syntax.
|
| | |
|
| |
| |
| |
| | |
Signed-off-by: Sol Jerome <sol.jerome@gmail.com>
|
| |
| |
| |
| |
| |
| |
| | |
Checking the status for services that don't support it leads to ugly
output in the interactive client on some platforms.
Signed-off-by: Sol Jerome <sol.jerome@gmail.com>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This new attribute allows the specification of a boot-time status
separately from the current 'status' attribute. This allows for more
fine-grained control over e.g. services that are really just boot
scripts.
Signed-off-by: Sol Jerome <sol.jerome@gmail.com>
|
| | |
|
| | |
|