mirror of
https://github.com/geerlingguy/ansible-role-apache
synced 2025-01-10 20:00:18 +01:00
19 lines
788 B
YAML
19 lines
788 B
YAML
|
---
|
||
|
# This is a demo of how to manage the selinux context using the file module
|
||
|
- hosts: test
|
||
|
user: root
|
||
|
tasks:
|
||
|
- name: Change setype of /etc/exports to non-default value
|
||
|
action: file path=/etc/exports setype=etc_t
|
||
|
- name: Change seuser of /etc/exports to non-default value
|
||
|
action: file path=/etc/exports seuser=unconfined_u
|
||
|
- name: Set selinux context back to default value
|
||
|
action: file path=/etc/exports context=default
|
||
|
- name: Create empty file
|
||
|
action: command /bin/touch /tmp/foo
|
||
|
- name: Change setype of /tmp/foo
|
||
|
action: file path=/tmp/foo setype=default_t
|
||
|
- name: Try to set secontext to default, but this will fail
|
||
|
because of the lack of a default in the policy
|
||
|
action: file path=/tmp/foo context=default
|