blob: 57e88bd732549ea8a429a8bb4b878043d4a8459a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
|
- name: Suppression du module SELinux pour hidden_services
file:
path: /root/tor-selinux-f22-policy-module.pp
state: absent
when: ansible_distribution == "Fedora"
- name: Suppression du module SELinux pour AVC dac error
file:
path: /root/tor-dac-capabilities.pp
state: absent
when: ansible_distribution == "Fedora"
- name: Suppression du module SELinux pour hidden_services
file:
path: /root/tor-selinux-centos6.6-policy-module.pp
state: absent
when: ansible_distribution == "CentOS"
- name: Installation des modules SELinux pour Centos
copy:
src: "{{ item }}-7.5.pp"
dest: "/root/{{ item }}-7.5.pp"
mode: 0644
with_items:
- tor-bind-pop_port-centos
- tor-dac-capabilities-centos
when: ansible_distribution == "CentOS" and ansible_distribution_version|int >= 7.5.1804
- name: Installation des modules SELinux pour Fedora
copy:
src: "{{ item }}-{{ ansible_distribution_version }}.pp"
dest: "/root/{{ item }}-{{ ansible_distribution_version }}.pp"
mode: 0644
with_items:
- tor-bind-pop_port-fedora
- tor-dac-capabilities-fedora
when: ansible_distribution == "Fedora" and ansible_distribution_version|int >= 27
- name: Vérification des modules
shell: semodule -l | grep '{{ item }}'
args:
executable: /usr/bin/zsh
with_items:
- tor-bind-pop_port
- tor-dac-capabilities
register: semodulelist
ignore_errors: yes
- name: Installation des modules
command: semodule -i /root/'{{ item }}'
with_items:
- tor-bind-pop_port
- tor-dac-capabilities
when: semodulelist is failed
- name: Configuration du booleen SELinux
seboolean: name=tor_can_network_relay state=yes persistent=yes
when: ansible_selinux.status != "disabled" and is_gardian is defined
|
