removing semanage bits from phabricator role
This commit is contained in:
parent
28438e0e13
commit
04555cfb53
1 changed files with 0 additions and 31 deletions
|
@ -17,9 +17,6 @@
|
|||
- libphutil
|
||||
- arcanist
|
||||
- phabricator
|
||||
- libsemanage-python
|
||||
- libselinux-python
|
||||
- policycoreutils-python
|
||||
when: ansible_distribution_major_version|int < 22
|
||||
|
||||
- name: ensure packages required for phabricator are installed (dnf)
|
||||
|
@ -43,15 +40,6 @@
|
|||
- phabricator
|
||||
when: ansible_distribution_major_version|int > 21 and ansible_cmdline.ostree is not defined
|
||||
|
||||
- name: ensure packages required to make selinux changes for phabricator are installed
|
||||
dnf: name={{ item }} state=present enablerepo={{ extra_enablerepos }}
|
||||
with_items:
|
||||
- libsemanage-python
|
||||
- libselinux-python
|
||||
- policycoreutils-python
|
||||
- policycoreutils-python-utils
|
||||
when: ansible_distribution_major_version|int > 21 and ansible_cmdline.ostree is not defined
|
||||
|
||||
- name: create mariadb user for phabricator
|
||||
mysql_user:
|
||||
name: "{{ mariadb_user }}"
|
||||
|
@ -152,25 +140,6 @@
|
|||
service: name=phabricator-sshd enabled=yes state=started
|
||||
when: enable_phabricator_git
|
||||
|
||||
- name: check to see if sshd port is already known by selinux
|
||||
shell: semanage port -l | grep ssh
|
||||
register: sshd_selinux_port
|
||||
check_mode: no
|
||||
changed_when: false
|
||||
tags:
|
||||
- sshd_config
|
||||
- config
|
||||
- sshd
|
||||
|
||||
|
||||
- name: allow alternate sshd port
|
||||
command: semanage port -a -t ssh_port_t -p tcp {{ sshd_port }}
|
||||
when: sshd_selinux_port.stdout.find('{{ sshd_port }}') == -1
|
||||
tags:
|
||||
- sshd_config
|
||||
- config
|
||||
- sshd
|
||||
|
||||
- name: generate phabricator phd service file
|
||||
template: src=phd.service.j2 dest=/lib/systemd/system/phd.service owner=root group=root mode=0644
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue