community.general.selinux_permissive (8.5.0) — module

Change permissive domain in SELinux policy

Authors: Michael Scherer (@mscherer) <misc@zarb.org>

Install collection

Install with ansible-galaxy collection install community.general:==8.5.0


Add to requirements.yml

  collections:
    - name: community.general
      version: 8.5.0

Description

Add and remove a domain from the list of permissive domains.


Requirements

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Change the httpd_t domain to permissive
  community.general.selinux_permissive:
    name: httpd_t
    permissive: true

Inputs

    
store:
    default: ''
    description:
    - Name of the SELinux policy store to use.
    type: str

domain:
    aliases:
    - name
    description:
    - The domain that will be added or removed from the list of permissive domains.
    required: true
    type: str

no_reload:
    default: false
    description:
    - Disable reloading of the SELinux policy after making change to a domain's permissive
      setting.
    - The default is V(false), which causes policy to be reloaded when a domain changes
      state.
    - Reloading the policy does not work on older versions of the C(policycoreutils-python)
      library, for example in EL 6."
    type: bool

permissive:
    description:
    - Indicate if the domain should or should not be set as permissive.
    required: true
    type: bool