firewalld-formula

History

fix: do not error on unknown os_family grain

If the formula was ran on a system that reported an os_family that
wasn't one of "Debian", "RedHat", "Arch", "Suse" then the map.jinja
template would fail to render with "'NoneType' is not iterable.

This occurs because grains.filter_by will return None when it fails
match the grain to the input dictionary. The value is then blindly
passed into a dict.update() which causes the failure.

In this patch we ensure that the default values, as defined in
defaults.yaml, are always applied when grain matching fails.

2020-04-18 15:53:46 +01:00

files

style(zone.xml): remove all trailing whitespaces

2020-04-01 19:00:37 +01:00

yaml_dump

test: verify map output using yaml_dump

2020-04-18 15:29:52 +01:00

backend.sls

Refactor backend format, add backward compatibility, simple pkg testing

2018-08-25 19:00:11 -03:00

config.sls

Default file permission for firewalld.conf is 644 not 640 (CentOS). Even if I think that "others" don't need to read that, it always shows up as file with non-default permissions from default rpm package in security scans. e.g. "rpm -Va |grep ^.M" or more salty way: "salt '*' pkg.verify" / salt '*' pkg.modified firewalld mode=True; manual fix e.g. rpm --setperms firewalld-*.el7.noarch