Jira (PUP-3187) Puppet file parameter selinux_ignore_defaults doesn't work as expected

[Dominic Cleal (JIRA)]

Title: Message Title

Dominic Cleal commented on an issue   Re: Puppet file parameter selinux_ignore_defaults doesn't work as expected I agree, the selinux_ignore_defaults => true behaviour looks incorrect. When true and without the seltype property, Puppet is not actively managing the context and so if it's just replacing the file content, the context should not change. Puppet::Util.replace_file should copy the SELinux context as it does with owner, gid and mode. (Incidentally, Augeas has similar code but copies the context: https://github.com/hercules-team/augeas/blob/master/src/transform.c#L843) Add Comment   Puppet / PUP-3187 Puppet file parameter selinux_ignore_defaults doesn't work as expected h2. Purpose https://docs.puppetlabs.com/references/latest/type.html#file-attribute-selinux_ignore_defaults {quote}selinux_ignore_defaults If this is set then Puppet will not ask SELinux (via matchpathcon) to supply defaults for the SELinux attributes (seluser, selrole, seltype, and selrange). In general, you should leave this set at its default and o... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.