Skip to content
This repository was archived by the owner on Nov 22, 2024. It is now read-only.

SELinux state should now be correctly set back to enforcing #9

Merged
merged 2 commits into from
Dec 10, 2020
Merged

SELinux state should now be correctly set back to enforcing #9

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
66e6859
SELinux state should now be correctly set back to `enforcing`
alessfg Dec 7, 2020
f9792b6
Merge branch 'main' into fix-selinux
alessfg Dec 9, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,10 @@ ENHANCEMENTS:
* Update Molecule to `3.2.0` and Docker Python SDK to `4.4.0`.
* Remove CentOS/RHEL `6` from supported platforms due to EOL.

BUG FIXES:

Fix issue whereas SELinux state would not be correctly set back to `enforcing` when `nginx_unit_selinux: true`.

## 0.2.1 (November 19, 2020)

ENHANCEMENTS:
Expand Down
7 changes: 1 addition & 6 deletions tasks/prerequisites/setup-selinux.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,8 +21,6 @@
selinux:
state: permissive
policy: targeted
changed_when: false
when: ansible_facts['selinux']['mode'] == "enforcing"

- name: Allow SELinux HTTP network connections
seboolean:
Expand Down Expand Up @@ -56,7 +54,4 @@
selinux:
state: enforcing
policy: targeted
changed_when: false
when:
- nginx_unit_selinux_enforcing | bool
- ansible_facts['selinux']['mode'] == "permissive"
when: nginx_unit_selinux_enforcing | bool