chef restorecon helper

restorecon.rb

libraries/restorecon.rb

def restorecon_cmd(path)
  %Q(restorecon "#{path}")
end

# restores selinux label for path
def restorecon(path)
  execute restorecon_cmd(path) do
    action :nothing
  end
  if block_given?
    res = yield path
    res && res.notifies(:run, resources(:execute => restorecon_cmd(path)), :immediately)
  end
end

def notify_restorecon(path)
  # todo: can't the particular restorecon resource just be generated dynamically?
  # looks ugly :/ http://comments.gmane.org/gmane.comp.sysutils.chef.user/1982
  notifies :run, resources(:execute => restorecon_cmd(path)), :immediately
end

...

restorecon '/etc/smartd.conf' do |path|
  cookbook_file path do
    source path
    owner "root"
    group "root"
    mode  "0644"
    notifies :restart, "service[smartd]"
  end
end