#!/bin/bash
set +e

# Unload foreman policy and set booleans. Dependant booleans must be managed in
# a separate transaction. Do not forget to edit countepart file
# (enable/disable) when updating this script.
for selinuxvariant in targeted
do
  if /usr/sbin/semodule -s $selinuxvariant -l >/dev/null; then
    # Remove all user defined ports (including the default one)
    # (docker and elastic can be removed in future release)
    /usr/sbin/semanage port -E | \
      grep -E '(elasticsearch|docker|foreman_osapi_compute)_port_t' | \
      sed s/-a/-d/g | \
      /usr/sbin/semanage -S $selinuxvariant -i -
    # Unload policy
    /usr/sbin/semodule -s $selinuxvariant -r foreman
  fi
done
