Another selinux boolean for pdc frontend.

2016-01-12 11:59:29 -05:00 · 2016-01-12 11:59:29 -05:00 · cad54f92ed
commit cad54f92ed
parent e0049f77c8
1 changed files with 7 additions and 2 deletions
--- a/roles/pdc/frontend/tasks/main.yml
+++ b/roles/pdc/frontend/tasks/main.yml
@ -38,8 +38,13 @@
  notify: reload httpd
  tags: pdc

- name: ensure selinux lets httpd talk to postgres
-  seboolean: name=httpd_can_network_connect_db persistent=yes state=yes
+- name: ensure selinux lets httpd do the stuff we need.
+  seboolean: name={{ item }} persistent=yes state=yes
+  with_items:
+  - httpd_can_network_connect_db
+  - httpd_can_sendmail
+  # XXX - Someday for fedmsg
+  #- httpd_can_network_connect
  tags:
  - pdc
  - selinux