removing semanage bits from phabricator role

This commit is contained in:
Tim Flink 2016-11-30 16:47:21 +00:00
parent 28438e0e13
commit 04555cfb53

View file

@ -17,9 +17,6 @@
- libphutil
- arcanist
- phabricator
- libsemanage-python
- libselinux-python
- policycoreutils-python
when: ansible_distribution_major_version|int < 22
- name: ensure packages required for phabricator are installed (dnf)
@ -43,15 +40,6 @@
- phabricator
when: ansible_distribution_major_version|int > 21 and ansible_cmdline.ostree is not defined
- name: ensure packages required to make selinux changes for phabricator are installed
dnf: name={{ item }} state=present enablerepo={{ extra_enablerepos }}
with_items:
- libsemanage-python
- libselinux-python
- policycoreutils-python
- policycoreutils-python-utils
when: ansible_distribution_major_version|int > 21 and ansible_cmdline.ostree is not defined
- name: create mariadb user for phabricator
mysql_user:
name: "{{ mariadb_user }}"
@ -152,25 +140,6 @@
service: name=phabricator-sshd enabled=yes state=started
when: enable_phabricator_git
- name: check to see if sshd port is already known by selinux
shell: semanage port -l | grep ssh
register: sshd_selinux_port
check_mode: no
changed_when: false
tags:
- sshd_config
- config
- sshd
- name: allow alternate sshd port
command: semanage port -a -t ssh_port_t -p tcp {{ sshd_port }}
when: sshd_selinux_port.stdout.find('{{ sshd_port }}') == -1
tags:
- sshd_config
- config
- sshd
- name: generate phabricator phd service file
template: src=phd.service.j2 dest=/lib/systemd/system/phd.service owner=root group=root mode=0644