fix: add task to set seport accordingly

2024-09-16 10:23:43 +02:00 · 2024-09-16 10:23:43 +02:00 · 019ce6ca7c
commit 019ce6ca7c
parent 723be05d79
1 changed files with 10 additions and 0 deletions
--- a/tasks/ssh_default.yml
+++ b/tasks/ssh_default.yml
@ -41,3 +41,13 @@
    group: root
    mode: "0640"
  when: ('crypto-policies' in ansible_facts.packages)
+
+- name: Ensure seport matches sshd config
+  seport:
+    ports: "{{ sshd_port }}"
+    proto: "tcp"
+    setype: "ssh_port_t"
+    state: "present"
+  when:
+    - ansible_selinux is defined
+    - ansible_selinux.status == "enabled"