2

I have created two custom SELinux Policy modules to allow rsyslog to parse audit.log.

Can I create an RPM of these two policies to distribute to 300+ clients? Is there a better way to go about this?

The clients are CentOS 5.10 machines.

3

CentOS ships their policies in rpms, so that's not a bad idea for you to do too. I doubt if there is any tool specifically for distributing them.

However, installing this rpm on 300+ hosts is another matter and requires/would greatly benefit from some orchestration solution like mcollective, or spacewalk/satellite, or fabric etc.

I distribute my policies with puppet, but either one of these things needs to be configured/enabled on your hosts as a prerequisite no matter how you choose to package your policies/settings, there is no getting around that without any solution to manage a large set of hosts in place, the job gets cumbresome.

If you got nothing in place already then maybe fabric is the tool for you to use.

| improve this answer | |
  • Petter, my clients are utilizing SaltStack, so pushing out the RPM won't be any issue. I will take a look at the CentOS policies RPMs for an example. – Matthew Jun 28 '14 at 23:02
  • ok good yes rpm -qa "*policy*" any of those src rpms would give good insight i think. – Petter H Jun 28 '14 at 23:12
  • 1
    I think I got it from here, hopefully. I will mark this as an answer. – Matthew Jun 28 '14 at 23:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.