On Thu, Sep 22, 2011 at 09:24:50AM -0400, Daniel J Walsh wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 09/22/2011 09:01 AM, Adam Przybyla wrote: > > On Wed, Sep 21, 2011 at 01:47:32PM -0800, Erinn Looney-Triggs > > wrote: > >> I am using puppet to manage my system configuration and I am > >> looking for the best way to manage file context changes between > >> multiple hosts. > >> > >> Basically I have some local changes that are held in > >> /etc/selinux/targeted/modules/active/file_contexts.local, is it > >> reasonable just to copy this file to hosts that need to be aware > >> of the changes held therein or is there a better method? > >> > >> This would be implemented on RHEL 5 and 6 systems. > > ... try csync2: > > http://thuannvn.blogspot.com/2010/01/csync2-is-so-cool.html > > Regards Adam Przybyla -- selinux mailing list > > selinux@xxxxxxxxxxxxxxxxxxxxxxx > > https://admin.fedoraproject.org/mailman/listinfo/selinux > Does csync2 support extended attributes? ... nope, but you could execeute some commands on remote systems after file was send. Use "exec" statement in your configs. Regards Adam Przybyla -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux