From: Giulio Fidente <gfidente@redhat.com>
Date: Thu, 23 Jun 2016 12:19:21 +0000 (+0200)
Subject: Default ceph_osd_selinux_permissive to false
X-Git-Tag: opnfv-6.0.0~706^2
X-Git-Url: https://gerrit.opnfv.org/gerrit/gitweb?a=commitdiff_plain;h=80f8b6442f9eb6c47db1433285b4d102d02bf673;p=apex-puppet-tripleo.git

Default ceph_osd_selinux_permissive to false

We don't set selinux in 'permissive' mode by default anymore.

Change-Id: I1aa46086f69e7c3efd2782da62fd18ade8343fde
Partial-Bug: 1595518
---

diff --git a/manifests/profile/base/ceph/osd.pp b/manifests/profile/base/ceph/osd.pp
index d0c77e9..a9224d3 100644
--- a/manifests/profile/base/ceph/osd.pp
+++ b/manifests/profile/base/ceph/osd.pp
@@ -20,7 +20,7 @@
 #
 # [*ceph_osd_selinux_permissive*]
 #   (Optional) Wheter to configure SELinux in permissive mode
-#   Default to true
+#   Default to false
 #
 # [*step*]
 #   (Optional) The current step in deployment. See tripleo-heat-templates
@@ -28,7 +28,7 @@
 #   Defaults to hiera('step')
 #
 class tripleo::profile::base::ceph::osd (
-  $ceph_osd_selinux_permissive = true,
+  $ceph_osd_selinux_permissive = false,
   $step                        = hiera('step'),
 ) {