mirror of
https://github.com/ansible-collections/community.general.git
synced 2024-09-14 20:13:21 +02:00
102 lines
2.3 KiB
YAML
102 lines
2.3 KiB
YAML
---
|
|
# Copyright (c) 2016, Dag Wieers <dag@wieers.com>
|
|
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
|
|
# SPDX-License-Identifier: GPL-3.0-or-later
|
|
|
|
- name: install requirements for RHEL
|
|
package:
|
|
name: policycoreutils-python
|
|
when:
|
|
- ansible_distribution == 'RedHat'
|
|
- ansible_distribution_major_version|int < 8
|
|
|
|
- name: install requirements for rhel8 beta
|
|
package:
|
|
name: python3-policycoreutils
|
|
when:
|
|
- ansible_distribution == 'RedHat'
|
|
- ansible_distribution_major_version|int >= 8
|
|
|
|
- name: Ensure we start with a clean state
|
|
sefcontext:
|
|
path: '/tmp/foo/bar(/.*)?'
|
|
setype: httpd_sys_content_t
|
|
state: absent
|
|
|
|
- name: Set SELinux file context of foo/bar
|
|
sefcontext:
|
|
path: '/tmp/foo/bar(/.*)?'
|
|
setype: httpd_sys_content_t
|
|
state: present
|
|
reload: false
|
|
register: first
|
|
|
|
- assert:
|
|
that:
|
|
- first is changed
|
|
- first.setype == 'httpd_sys_content_t'
|
|
|
|
- name: Set SELinux file context of foo/bar (again)
|
|
sefcontext:
|
|
path: '/tmp/foo/bar(/.*)?'
|
|
setype: httpd_sys_content_t
|
|
state: present
|
|
reload: false
|
|
register: second
|
|
|
|
- assert:
|
|
that:
|
|
- second is not changed
|
|
- second.setype == 'httpd_sys_content_t'
|
|
|
|
- name: Change SELinux file context of foo/bar
|
|
sefcontext:
|
|
path: '/tmp/foo/bar(/.*)?'
|
|
setype: unlabeled_t
|
|
state: present
|
|
reload: false
|
|
register: third
|
|
|
|
- assert:
|
|
that:
|
|
- third is changed
|
|
- third.setype == 'unlabeled_t'
|
|
|
|
- name: Change SELinux file context of foo/bar (again)
|
|
sefcontext:
|
|
path: '/tmp/foo/bar(/.*)?'
|
|
setype: unlabeled_t
|
|
state: present
|
|
reload: false
|
|
register: fourth
|
|
|
|
- assert:
|
|
that:
|
|
- fourth is not changed
|
|
- fourth.setype == 'unlabeled_t'
|
|
|
|
- name: Delete SELinux file context of foo/bar
|
|
sefcontext:
|
|
path: '/tmp/foo/bar(/.*)?'
|
|
setype: httpd_sys_content_t
|
|
state: absent
|
|
reload: false
|
|
register: fifth
|
|
|
|
- assert:
|
|
that:
|
|
- fifth is changed
|
|
- fifth.setype == 'httpd_sys_content_t'
|
|
|
|
- name: Delete SELinux file context of foo/bar (again)
|
|
sefcontext:
|
|
path: '/tmp/foo/bar(/.*)?'
|
|
setype: unlabeled_t
|
|
state: absent
|
|
reload: false
|
|
register: sixth
|
|
|
|
- assert:
|
|
that:
|
|
- sixth is not changed
|
|
- sixth.setype == 'unlabeled_t'
|