seboolean – Toggles SELinux booleans
Synopsis
- Toggles SELinux booleans.
Requirements
The below requirements are needed on the host that executes this module.
- libselinux-python
- libsemanage-python
Parameters
| Parameter | Choices/Defaults | Comments |
|---|---|---|
| ignore_selinux_state boolean added in 2.8 |
| Useful for scenarios (chrooted environment) that you can't get the real SELinux state. |
| name - / required | Name of the boolean to configure. | |
| persistent boolean |
| Set to yes if the boolean setting should survive a reboot. |
| state boolean / required |
| Desired boolean value |
Notes
Note
- Not tested on any Debian based system.
Examples
- name: Set httpd_can_network_connect flag on and keep it persistent across reboots
seboolean:
name: httpd_can_network_connect
state: yes
persistent: yes
Status
- This module is guaranteed to have no backward incompatible interface changes going forward. [stableinterface]
- This module is maintained by the Ansible Core Team. [core]
Red Hat Support
More information about Red Hat’s support of this module is available from this Red Hat Knowledge Base article.
Authors
- Stephen Fromm (@sfromm)
Hint
If you notice any issues in this documentation you can edit this document to improve it.
© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/2.8/modules/seboolean_module.html