someone must have put this context in by hand last time.. bad someone bad.. no cookie

2016-02-11 18:32:48 +00:00 · 2016-02-11 18:32:48 +00:00 · 9b52b0e1b0
commit 9b52b0e1b0
parent e8ec9c5193
1 changed files with 17 additions and 0 deletions
--- a/roles/people/tasks/main.yml
+++ b/roles/people/tasks/main.yml
@ -96,6 +96,23 @@
  tags:
  - config
  - selinux
+
+- name: check the selinux context of the people dir
+  command: matchpathcon "/srv/people(/.*)?"
+  register: gitcontext
+  always_run: yes
+  changed_when: false
+  tags:
+  - config
+  - selinux
+
+- name: set the SELinux policy for the web dir
+  command: semanage fcontext -a -t httpd_sys_content_t "/srv/people(/.*)?"
+  when: gitcontext.stdout.find('httpd_sys_content_t') == -1
+  tags:
+  - config
+  - selinux
+
 #
 # This sets the default, it's safe to always run. 
 # Default quota for users is 2gb