From c83a6dddf6fb6259011bdebe8646447203ac5967 Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Thu, 28 Sep 2017 21:11:02 +0000
Subject: [PATCH] Additional selinux boolean for odcs frontend.

---
 roles/odcs/frontend/tasks/main.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/roles/odcs/frontend/tasks/main.yml b/roles/odcs/frontend/tasks/main.yml
index 791b118908..131cd1921b 100644
--- a/roles/odcs/frontend/tasks/main.yml
+++ b/roles/odcs/frontend/tasks/main.yml
@@ -1,10 +1,15 @@
 ---
 - name: modify selinux so that httpd can serve data from NFS shares if needed
   seboolean:
-    name: httpd_use_nfs
+    name: {{item}}
     state: yes
     persistent: yes
   when: "'enabled' in ansible_selinux.status"
+  with_items:
+  # For requesting UserInfo from ipsilon.
+  - httpd_execmem
+  # For accessing /srv/odcs/
+  - httpd_use_nfs
   tags:
   - odcs
   - odcs/frontend