sefcontext - Manages SELinux file context mapping definitions
New in version 2.2.
Synopsis
- Manages SELinux file context mapping definitions.
- Similar to the
semanage fcontextcommand.
Requirements (on host that executes module)
- libselinux-python
- policycoreutils-python
Options
| parameter | required | default | choices | comments |
|---|---|---|---|---|
| ftype | no | a | File type. | |
| reload | no | yes |
| Reload SELinux policy after commit. |
| selevel | no | SELinux range for the specified target. aliases: serange | ||
| setype | yes | SELinux type for the specified target. | ||
| seuser | no | SELinux user for the specified target. | ||
| state | no | present |
| Desired boolean value. |
| target | yes | Target path (expression). aliases: path |
Examples
# Allow apache to modify files in /srv/git_repos
- sefcontext:
target: '/srv/git_repos(/.*)?'
setype: httpd_git_rw_content_t
state: present
Notes
Note
- The changes are persistent across reboots
Status
This module is flagged as preview which means that it is not guaranteed to have a backwards compatible interface.
For help in developing on modules, should you be so inclined, please read Community Information & Contributing, Testing Ansible and Developing Modules.
© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/2.4/sefcontext_module.html