pagure: enable the httpd_execmem selinux boolean

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-10-01 11:39:31 +02:00 · 2020-10-01 11:39:31 +02:00 · 20f901f337
commit 20f901f337
parent 5383f87f30
1 changed files with 9 additions and 0 deletions
--- a/roles/pagure/frontend/tasks/main.yml
+++ b/roles/pagure/frontend/tasks/main.yml
@ -539,6 +539,15 @@
  - web
  - pagure

+- name: set sebooleans so pygit2 can read the git repos
+  seboolean: name=httpd_execmem
+                    state=true
+                    persistent=true
+  tags:
+  - selinux
+  - web
+  - pagure
+

 # Ensure all the services are up and running