add task to set selinux booleans

2018-09-27 00:06:07 +02:00 · 2018-09-27 00:06:07 +02:00 · 0459ad9683
commit 0459ad9683
parent ad7f1c6f7b
1 changed files with 8 additions and 0 deletions
--- a/tasks/install.yml
+++ b/tasks/install.yml
@ -82,6 +82,14 @@
      state: present
      rules: '-A INPUT -p tcp -m multiport --dports {{ nginx_open_ports|join(",") }} -j ACCEPT'
    when: nginx_iptables_enabled
+
+  - name: Set selinux booleans
+    seboolean:
+      name: "{{ item.name }}"
+      state: "{{ item.state }}"
+      persistent: "{{ item.persistent }}"
+    with_items: "{{ nginx_set_sebooleans }}"
+    when: nginx_set_sebooleans
  become: True
  become_user: root