ansible.builtin.selogin (v2.9.27) — module

Install Ansible via pip

Install with pip install ansible==2.9.27

Description

Manages linux user to SELinux user mapping

Requirements

• libselinux
• policycoreutils

Usage examples

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

# Modify the default user on the system to the guest_u user
- selogin:
    login: __default__
    seuser: guest_u
    state: present

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

# Assign gijoe user on an MLS machine a range and to the staff_u user
- selogin:
    login: gijoe
    seuser: staff_u
    serange: SystemLow-Secret
    state: present

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

# Assign all users in the engineering group to the staff_u user
- selogin:
    login: '%engineering'
    seuser: staff_u
    state: present

Inputs

    
login:
    description:
    - a Linux user
    required: true

state:
    choices:
    - present
    - absent
    default: present
    description:
    - Desired mapping value.
    required: true

reload:
    default: true
    description:
    - Reload SELinux policy after commit.

seuser:
    description:
    - SELinux user name
    required: true

selevel:
    aliases:
    - serange
    default: s0
    description:
    - MLS/MCS Security Range (MLS/MCS Systems only) SELinux Range for SELinux login mapping
      defaults to the SELinux user record range.

ignore_selinux_state:
    default: false
    description:
    - Run independent of selinux runtime state
    type: bool