ansible-roles/roles/diagrams/tasks/selinux.yml
2021-12-01 19:13:34 +01:00

26 lines
788 B
YAML

---
- name: Allow tomcat to bind on diagrams' port
seport: ports={{ diagrams_port }},{{ diagrams_port + 1 }} proto=tcp setype=http_port_t state=present
tags: diagrams
- name: Set SELinux context
sefcontext:
target: "{{ item.target }}"
setype: "{{ item.type }}"
state: present
loop:
- target: "{{ diagrams_root_dir }}/webapps(/.*)?"
type: tomcat_var_lib_t
- target: "{{ diagrams_root_dir }}/(work|tmp)(/.*)?"
type: tomcat_cache_t
- target: "{{ diagrams_root_dir }}/logs(/.*)?"
type: tomcat_log_t
register: diagrams_sefcontext
tags: diagrams
- name: Restore file contexts
command: restorecon -R {{ diagrams_root_dir }}
when: diagrams_sefcontext.results | selectattr('changed','equalto',True) | list | length > 0
tags: diagrams