diff options
| author | Nick Bebout <nb@lockbox01.phx2.fedoraproject.org> | 2014-08-28 22:58:41 +0000 |
|---|---|---|
| committer | Nick Bebout <nb@lockbox01.phx2.fedoraproject.org> | 2014-08-28 22:58:41 +0000 |
| commit | 8e99806cdc88591b80ff5f2780debf8794628307 (patch) | |
| tree | effdb573f6f9f93baf7587b895d361d8a6360019 /roles/keyserver | |
| parent | 56b007a01633d745a56b870ab199e66e403c025f (diff) | |
| download | ansible-8e99806cdc88591b80ff5f2780debf8794628307.tar.gz ansible-8e99806cdc88591b80ff5f2780debf8794628307.tar.xz ansible-8e99806cdc88591b80ff5f2780debf8794628307.zip | |
Add keyserver selinux module
Diffstat (limited to 'roles/keyserver')
| -rw-r--r-- | roles/keyserver/files/keyserver.mod | bin | 0 -> 952 bytes | |||
| -rw-r--r-- | roles/keyserver/files/keyserver.pp | bin | 0 -> 968 bytes | |||
| -rw-r--r-- | roles/keyserver/files/keyserver.te | 11 | ||||
| -rw-r--r-- | roles/keyserver/tasks/main.yml | 8 |
4 files changed, 19 insertions, 0 deletions
diff --git a/roles/keyserver/files/keyserver.mod b/roles/keyserver/files/keyserver.mod Binary files differnew file mode 100644 index 000000000..0b094802a --- /dev/null +++ b/roles/keyserver/files/keyserver.mod diff --git a/roles/keyserver/files/keyserver.pp b/roles/keyserver/files/keyserver.pp Binary files differnew file mode 100644 index 000000000..809f3eefa --- /dev/null +++ b/roles/keyserver/files/keyserver.pp diff --git a/roles/keyserver/files/keyserver.te b/roles/keyserver/files/keyserver.te new file mode 100644 index 000000000..ac4dfe0d7 --- /dev/null +++ b/roles/keyserver/files/keyserver.te @@ -0,0 +1,11 @@ + +module keyserver 1.0; + +require { + type httpd_t; + type pgpkeyserver_port_t; + class tcp_socket name_bind; +} + +#============= httpd_t ============== +allow httpd_t pgpkeyserver_port_t:tcp_socket name_bind; diff --git a/roles/keyserver/tasks/main.yml b/roles/keyserver/tasks/main.yml index 8401ca251..6591c1722 100644 --- a/roles/keyserver/tasks/main.yml +++ b/roles/keyserver/tasks/main.yml @@ -98,3 +98,11 @@ tags: - service +# Two tasks for handling our custom selinux module + - name: copy over our custom selinux module + copy: src=keyserver.pp dest=/srv/sks/keyserver.pp + register: selinux_module + + - name: install our custom selinux module + command: semodule -i /srv/sks/keyserver.pp + when: selinux_module|changed |