bodhi2: Disable the bz-cookie selinux context stuff for now

This commit is contained in:
Luke Macken 2015-07-22 18:32:08 +00:00
parent cdfce9f59c
commit 1991ad9608
2 changed files with 23 additions and 23 deletions

View file

@ -71,12 +71,12 @@
tags: tags:
- config - config
- name: change owner attribute of /var/tmp/bodhi-bz.cookie file #- name: change owner attribute of /var/tmp/bodhi-bz.cookie file
file: > # file: >
path=/var/tmp/bodhi-bz.cookie # path=/var/tmp/bodhi-bz.cookie
owner=masher # owner=masher
tags: # tags:
- config # - config
- name: install /etc/bodhi/*.mash files - name: install /etc/bodhi/*.mash files
copy: > copy: >

View file

@ -110,23 +110,23 @@
# - config # - config
# - bodhi # - bodhi
- name: check the selinux context of the bugzilla cookie #- name: check the selinux context of the bugzilla cookie
command: matchpathcon /var/tmp/bodhi-bz.cookie # command: matchpathcon /var/tmp/bodhi-bz.cookie
register: cookiecontext # register: cookiecontext
always_run: yes # always_run: yes
changed_when: "1 != 1" # changed_when: "1 != 1"
tags: # tags:
- config # - config
- bodhi # - bodhi
- selinux # - selinux
#
- name: set the SELinux policy for the bugzilla cookie #- name: set the SELinux policy for the bugzilla cookie
command: semanage fcontext -a -t httpd_tmp_t "/var/tmp/bodhi-bz.cookie" # command: semanage fcontext -a -t httpd_tmp_t "/var/tmp/bodhi-bz.cookie"
when: cookiecontext.stdout.find('httpd_tmp_t') == -1 # when: cookiecontext.stdout.find('httpd_tmp_t') == -1
tags: # tags:
- config # - config
- bodhi # - bodhi
- selinux # - selinux
- name: enable httpd_tmp_exec SELinux boolean - name: enable httpd_tmp_exec SELinux boolean
seboolean: name=httpd_tmp_exec state=yes persistent=yes seboolean: name=httpd_tmp_exec state=yes persistent=yes