sebclem/ansible-role-nginx
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

SELinux state should now be correctly set back to enforcing (#351)

Browse Source
This commit is contained in:
Alessandro Fael Garcia 2020-12-10 12:46:29 +01:00 committed by GitHub
parent c2b8eb71a4
commit 063c2d0be1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
CHANGELOG.md
View File

@ -14,6 +14,10 @@ ENHANCEMENTS:
Switch NGINX keysites and OSS default repository data from a dictionary to individual variables to prevent potential issues arisen from Jinja2 dictionary run-time evaluations. Switch NGINX keysites and OSS default repository data from a dictionary to individual variables to prevent potential issues arisen from Jinja2 dictionary run-time evaluations.
BUG FIXES:
Fix issue whereas SELinux state would not be correctly set back to `enforcing` when `nginx_selinux: true`.
## 0.18.0 (November 13, 2020) ## 0.18.0 (November 13, 2020)
BREAKING CHANGES: BREAKING CHANGES:

7
tasks/prerequisites/setup-selinux.yml
View File

@ -21,8 +21,6 @@
selinux: selinux:
state: permissive state: permissive
policy: targeted policy: targeted
changed_when: false
when: ansible_facts['selinux']['mode'] == "enforcing"
- name: Allow SELinux HTTP network connections - name: Allow SELinux HTTP network connections
seboolean: seboolean:
@ -96,7 +94,4 @@
selinux: selinux:
state: enforcing state: enforcing
policy: targeted policy: targeted
changed_when: false when: nginx_selinux_enforcing | bool
when:
- nginx_selinux_enforcing | bool
- ansible_facts['selinux']['mode'] == "permissive"