sefcontext - Manages SELinux file context mapping definitions
New in version 2.2.
Synopsis
- Manages SELinux file context mapping definitions.
- Similar to the
semanage fcontext
command.
Requirements (on host that executes module)
- libselinux-python
- policycoreutils-python
Options
parameter | required | default | choices | comments |
---|---|---|---|---|
ftype | no | a | File type. | |
reload | no | yes |
| Reload SELinux policy after commit. |
selevel | no | SELinux range for the specified target. aliases: serange | ||
setype | yes | SELinux type for the specified target. | ||
seuser | no | SELinux user for the specified target. | ||
state | no | present |
| Desired boolean value. |
target | yes | Target path (expression). aliases: path |
Examples
# Allow apache to modify files in /srv/git_repos - sefcontext: target: '/srv/git_repos(/.*)?' setype: httpd_git_rw_content_t state: present
Notes
Note
- The changes are persistent across reboots
Status
This module is flagged as preview which means that it is not guaranteed to have a backwards compatible interface.
For help in developing on modules, should you be so inclined, please read Community Information & Contributing, Testing Ansible and Developing Modules.
© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/2.4/sefcontext_module.html