updating selinux context for buildmaster files on taskotron-dev
This commit is contained in:
parent
f92c085a90
commit
7f01af8a88
1 changed files with 10 additions and 3 deletions
|
@ -29,13 +29,20 @@
|
|||
with_items:
|
||||
- python-novaclient
|
||||
|
||||
- name: set the selinux fcontext type for the buildmaster_home to var_lib_t
|
||||
command: semanage fcontext -a -t var_lib_t "{{ buildmaster_home }}(/.*)?"
|
||||
when: deployment_type == 'dev'
|
||||
|
||||
- name: add the buildmaster user
|
||||
user: name={{ buildmaster_user }} home={{ buildmaster_home }}
|
||||
|
||||
|
||||
- name: ensure buildmaster user can use home directory
|
||||
- name: ensure buildmaster user can use home directory (old)
|
||||
file: path="{{ buildmaster_home }}" state=directory owner=buildmaster group=buildmaster mode=0775 setype=user_home_t
|
||||
when: deployment_type == 'prod' or deployment_type == 'stg' or deployment_type == 'dev' or deployment_type == 'local'
|
||||
when: deployment_type == 'prod' or deployment_type == 'stg' or deployment_type == 'local'
|
||||
|
||||
- name: ensure buildmaster user can use home directory (new)
|
||||
file: path="{{ buildmaster_home }}" state=directory owner=buildmaster group=buildmaster mode=0775
|
||||
when: deployment_type in ['dev']
|
||||
|
||||
- name: allow httpd tcp connections with selinux
|
||||
seboolean: name=httpd_can_network_connect state=true persistent=yes
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue