I've added in code to set the selinux contexts on the various files that require it when running in enforce mode. If selinux is not enabled, these are ignored.
Without the contexts, the /etc/aliases.db file could not be read by postfix and the /var/vmail directory structure was not accessible through dovecot.
There is no requirement to have the selinux module as a dependency as we are using puppet built-in functionality.
jordiprats
commented
6 years ago
I've added in code to set the selinux contexts on the various files that require it when running in enforce mode. If selinux is not enabled, these are ignored.
Without the contexts, the /etc/aliases.db file could not be read by postfix and the /var/vmail directory structure was not accessible through dovecot.
There is no requirement to have the selinux module as a dependency as we are using puppet built-in functionality.