From f13a334165c0e1d25cbf0cdacceaeba9f07c6569 Mon Sep 17 00:00:00 2001
From: Tim Flink <tflink@fedoraproject.org>
Date: Mon, 9 Jun 2014 19:20:02 +0000
Subject: [PATCH] setting httpd_can_network_connect_db sebool for
 resultsdb-backend role

---
 roles/taskotron/resultsdb-backend/tasks/main.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/roles/taskotron/resultsdb-backend/tasks/main.yml b/roles/taskotron/resultsdb-backend/tasks/main.yml
index e7a58dbe83..b0b24ef0d0 100644
--- a/roles/taskotron/resultsdb-backend/tasks/main.yml
+++ b/roles/taskotron/resultsdb-backend/tasks/main.yml
@@ -17,6 +17,9 @@
   sudo: true
   action: postgresql_user db={{ resultsdb_db_name }} user={{ resultsdb_db_user }} password={{ resultsdb_db_password }} role_attr_flags=NOSUPERUSER
 
+- name: ensure selinux lets httpd talk to postgres
+  seboolean: name=httpd_can_network_connect_db persistent=yes state=yes
+
 - name: generate resultsdb config
   template: src=settings.py.j2 dest=/etc/resultsdb/settings.py owner=root group=root mode=0644
   notify: