Merge pull request #49 from redBorder/feature/18893_integrate_firewal…

…l_cookbook

Feature/18893 integrate firewall cookbook

resources/attributes/default.rb

@@ -58,6 +58,7 @@
 default['redborder']['services']['chef-client'] = true
 default['redborder']['services']['chrony'] = true
 default['redborder']['services']['redborder-exporter'] = true
+default['redborder']['services']['firewall'] = true
 default['redborder']['services']['redborder-monitor'] = true
 default['redborder']['services']['rsyslog'] = true
 default['redborder']['services']['snmp'] = true
@@ -66,6 +67,7 @@
 default['redborder']['systemdservices']['barnyard2'] = ['barnyard2']
 default['redborder']['systemdservices']['chef-client'] = ['chef-client']
 default['redborder']['systemdservices']['chrony'] = ['chronyd']
+default['redborder']['systemdservices']['firewall'] = ['firewalld']
 default['redborder']['systemdservices']['redborder-exporter'] = ['rb-exporter']
 default['redborder']['systemdservices']['redborder-monitor'] = ['redborder-monitor']
 default['redborder']['systemdservices']['rsyslog'] = ['rsyslog']

resources/metadata.rb

@@ -20,3 +20,4 @@
 depends 'rb-clamav'
 depends 'rb-chrony'
 depends 'rb-exporter'
+depends 'rb-firewall'

resources/recipes/configure.rb

@@ -44,6 +44,14 @@
   end
 end
 
+rb_firewall_config 'Configure Firewall' do
+  if ips_services['firewall']
+    action :add
+  else
+    action :remove
+  end
+end
+
 node.normal['redborder']['chef_client_interval'] = 300
 
 directory '/etc/snortpcaps' do