ansible.builtin.seport (v2.9.27) — module

Install Ansible via pip

Install with pip install ansible==2.9.27

Description

Manages SELinux network port type definitions.

Requirements

• libselinux-python
• policycoreutils-python

Usage examples

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

- name: Allow Apache to listen on tcp port 8888
  seport:
    ports: 8888
    proto: tcp
    setype: http_port_t
    state: present

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

- name: Allow sshd to listen on tcp port 8991
  seport:
    ports: 8991
    proto: tcp
    setype: ssh_port_t
    state: present

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

- name: Allow memcached to listen on tcp ports 10000-10100 and 10112
  seport:
    ports: 10000-10100,10112
    proto: tcp
    setype: memcache_port_t
    state: present

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

- name: Allow memcached to listen on tcp ports 10000-10100 and 10112
  seport:
    ports:
      - 10000-10100
      - 10112
    proto: tcp
    setype: memcache_port_t
    state: present

Inputs

    
ports:
    description:
    - Ports or port ranges.
    - Can be a list (since 2.6) or comma separated string.
    required: true
    type: list

proto:
    choices:
    - tcp
    - udp
    description:
    - Protocol for the specified port.
    required: true
    type: str

state:
    choices:
    - absent
    - present
    default: present
    description:
    - Desired boolean value.
    type: str

reload:
    default: true
    description:
    - Reload SELinux policy after commit.
    type: bool

setype:
    description:
    - SELinux type for the specified port.
    required: true
    type: str

ignore_selinux_state:
    default: false
    description:
    - Run independent of selinux runtime state
    type: bool
    version_added: '2.8'
    version_added_collection: ansible.builtin