Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Fix pagure facls for https cloning

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2015-05-21 08:58:11 +00:00
parent 5464c589d1
commit 157d2e00eb
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
roles/pagure/frontend/tasks/main.yml
View file

@ -211,6 +211,14 @@
notify: notify:
- restart apache - restart apache
- name: Add default facl so apache can read git repos
acl: default=yes etype=user entity=apache permissions=rx name=/srv/git
register: acl_updates
- name: Manually fix current ACLs since Ansible doesnt know recursive acls
when: acl_updates.changed
command: /usr/bin/setfacl -Rdm user:apache:rx /srv/git
- name: set sebooleans so pkgdb2 can talk to the db - name: set sebooleans so pkgdb2 can talk to the db
action: seboolean name=httpd_can_network_connect_db action: seboolean name=httpd_can_network_connect_db
state=true state=true