From 50738d3b00910cc2df1b3f29000e878355b6ebcd Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Wed, 4 Jun 2014 18:46:37 +0000
Subject: [PATCH] Tell selinux that koji-hub can fedmsg.

---
 roles/koji_hub/tasks/main.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/roles/koji_hub/tasks/main.yml b/roles/koji_hub/tasks/main.yml
index 659dc9d216..6b8c80f41e 100644
--- a/roles/koji_hub/tasks/main.yml
+++ b/roles/koji_hub/tasks/main.yml
@@ -38,6 +38,11 @@
   - config
   notify: restart httpd
 
+- name: enable httpd_can_network_connect SELinux boolean for fedmsg
+  seboolean: name=httpd_can_network_connect state=yes persistent=yes
+  tags:
+  - config
+
 - name: koji fedmsg plugin
   copy: src=fedmsg-koji-plugin.py dest=/usr/lib/koji-hub-plugins/fedmsg-koji-plugin.py
   tags: