[Boolean] disable/enable the management of the ferm default config
+#### `manage_initfile`
+
+[Boolean] disable/enable the management of the ferm init script for RedHat-based OS
+
#### `configfile`
[Stdlib::Absolutepath] path to the config file
---
ferm::manage_service: false
ferm::manage_configfile: false
+ferm::manage_initfile: false
ferm::disable_conntrack: false
ferm::configfile: /etc/ferm.conf
ferm::input_policy: DROP
# @param manage_configfile Disable/Enable the management of the ferm default config
# Default value: false
# Allowed values: (true|false)
+# @param manage_initfile Disable/Enable the management of the ferm init script for RedHat-based OS
+# Default value: false
+# Allowed values: (true|false)
# @param configfile Path to the config file
# Default value: /etc/ferm.conf
# Allowed values: Stdlib::Absolutepath
class ferm (
Boolean $manage_service,
Boolean $manage_configfile,
+ Boolean $manage_initfile,
Stdlib::Absolutepath $configfile,
Boolean $disable_conntrack,
Ferm::Policies $forward_policy,
ensure => 'latest',
}
- if $facts['os']['family'] == 'RedHat' and versioncmp($facts['os']['release']['major'], '6') <= 0 {
- file{'/etc/init.d/ferm':
- ensure => 'present',
- mode => '0755',
- source => "puppet:///modules/${module_name}/ferm",
+ if $ferm::manage_initfile {
+ if $facts['os']['family'] == 'RedHat' and versioncmp($facts['os']['release']['major'], '6') <= 0 {
+ file{'/etc/init.d/ferm':
+ ensure => 'present',
+ mode => '0755',
+ source => "puppet:///modules/${module_name}/ferm",
+ }
}
}
}