From 77096060f63a22f9b605b08deb0e7388c55ad059 Mon Sep 17 00:00:00 2001 From: Pierre-Yves Chibon Date: Thu, 5 Nov 2020 15:48:41 +0100 Subject: [PATCH] distgit/pagure: Configure selinux in distgit just like on pagure.io Signed-off-by: Pierre-Yves Chibon --- roles/distgit/pagure/tasks/main.yml | 25 ++----------------------- 1 file changed, 2 insertions(+), 23 deletions(-) diff --git a/roles/distgit/pagure/tasks/main.yml b/roles/distgit/pagure/tasks/main.yml index 8057df7278..88ff08c1b5 100644 --- a/roles/distgit/pagure/tasks/main.yml +++ b/roles/distgit/pagure/tasks/main.yml @@ -207,32 +207,11 @@ tags: - pagure -- name: set sebooleans so pagure can talk to the db - seboolean: name=httpd_can_network_connect_db - state=true - persistent=true - tags: - - selinux - - web - - pagure +# Configure SELinux in dist-git/pagure -- name: set sebooleans so apache can send emails - seboolean: name=httpd_can_sendmail - state=true - persistent=true +- import_tasks: "{{tasks_path}}../roles/pagure/tasks/selinux.yml" tags: - selinux - - web - - pagure - -- name: set sebooleans so pagure can talk to libgit2 - seboolean: name=httpd_execmem - state=true - persistent=true - tags: - - selinux - - web - - pagure # HOTFIX: adjust bugzilla overrides #- name: HOTFIX - adjust bugzilla overrides