summaryrefslogtreecommitdiffstats
path: root/roles/torrelay/tasks/selinux.yml
diff options
context:
space:
mode:
Diffstat (limited to 'roles/torrelay/tasks/selinux.yml')
-rw-r--r--roles/torrelay/tasks/selinux.yml18
1 files changed, 18 insertions, 0 deletions
diff --git a/roles/torrelay/tasks/selinux.yml b/roles/torrelay/tasks/selinux.yml
new file mode 100644
index 0000000..39b98c9
--- /dev/null
+++ b/roles/torrelay/tasks/selinux.yml
@@ -0,0 +1,18 @@
+- name: Déploiement du module SELinux pour hidden_services
+ copy: src=tor-selinux-f22-policy-module.pp dest=/root/tor-selinux-f22-policy-module.pp
+ mode=644
+ when: ansible_distribution == "Fedora"
+
+- name: Déploiement du module SELinux pour AVC dac error
+ copy: src=tor-dac-capabilities.pp dest=/root/tor-dac-capabilities.pp
+ mode=644
+ when: ansible_distribution == "Fedora"
+
+- name: Déploiement du module SELinux pour hidden_services
+ copy: src=tor-selinux-centos6.6-policy-module.pp dest=/root/tor-selinux-centos6.6-policy-module.pp
+ mode=644
+ when: ansible_distribution == "CentOS"
+
+- name: Configuration du booleen SELinux
+ seboolean: name=tor_can_network_relay state=yes persistent=yes
+ when: ansible_selinux.status != "disabled" and is_gardian is defined