ansible.builtin.selinux_permissive (v2.9.27) — module

Change permissive domain in SELinux policy

| "added in version" 2.0 of ansible.builtin"

Authors: Michael Scherer (@mscherer) <misc@zarb.org>

preview | supported by community

Install Ansible via pip

Install with pip install ansible==2.9.27

Description

Add and remove a domain from the list of permissive domains.


Requirements

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Change the httpd_t domain to permissive
  selinux_permissive:
    name: httpd_t
    permissive: true

Inputs

    
store:
    description:
    - Name of the SELinux policy store to use.
    type: str

domain:
    aliases:
    - name
    default: ''
    description:
    - The domain that will be added or removed from the list of permissive domains.
    required: true
    type: str

no_reload:
    default: false
    description:
    - Disable reloading of the SELinux policy after making change to a domain's permissive
      setting.
    - The default is C(no), which causes policy to be reloaded when a domain changes state.
    - Reloading the policy does not work on older versions of the C(policycoreutils-python)
      library, for example in EL 6."
    type: bool

permissive:
    description:
    - Indicate if the domain should or should not be set as permissive.
    required: true
    type: bool