sefcontext - Manages SELinux file context mapping definitions

• Synopsis
  • Requirements
• Parameters
• Notes
• Examples
• Status
• Maintenance
  • Author

Synopsis

• Manages SELinux file context mapping definitions.
• Similar to the semanage fcontext command.

Requirements

The below requirements are needed on the host that executes this module.

• libselinux-python
• policycoreutils-python

Parameters

Parameter	Choices/Defaults	Comments
ftype	Default: "a"	File type.
reload bool	Choices: no yes ←	Reload SELinux policy after commit.
selevel		SELinux range for the specified target. aliases: serange
setype required		SELinux type for the specified target.
seuser		SELinux user for the specified target.
state	Choices: absent present ←	Desired boolean value.
target required		Target path (expression). aliases: path

Notes

Examples

# Allow apache to modify files in /srv/git_repos
- sefcontext:
    target: '/srv/git_repos(/.*)?'
    setype: httpd_git_rw_content_t
    state: present

Status

This module is flagged as preview which means that it is not guaranteed to have a backwards compatible interface.

Maintenance

This module is flagged as community which means that it is maintained by the Ansible Community. See Module Maintenance & Support for more info.

For a list of other modules that are also maintained by the Ansible Community, see here.

Author

• Dag Wieers (@dagwieers)