search for: selinux_ignore_default

...fy which will go and check and re-set the selinux file_context if there are any changes in these directories. They''re set to recurse, so to stop Puppet changing things from unconfined_u to system_u on a regular basis, and sending refresh notices to my Exec resources, I''ve set selinux_ignore_defaults to true in my File resources. This strikes me as a bit of a dirty way of doing things, and I was wondering if anyone had any better ideas of how to manage this. Please find below a sample of the relevant code - because I''m sure my verbose description is probably leaving some people s...