Browse Source

Safe disable SELinux

Sometimes, a sysadmin might outright delete the SELinux rpms and
delete the configuration. This causes the selinux module to fail
with
```
IOError: [Errno 2] No such file or directory: '/etc/selinux/config'\n",
"module_stdout": "", "msg": "MODULE FAILURE"}
```

This simply checks that /etc/selinux/config exists before we try
to set it Permissive.

Update from feedback
pull/1049/head
Abel Lopez 7 years ago
parent
commit
0bfc2d0f2f
No known key found for this signature in database GPG Key ID: 19BA3843E46A731
1 changed files with 7 additions and 1 deletions
  1. 8
      roles/kubernetes/preinstall/tasks/main.yml

8
roles/kubernetes/preinstall/tasks/main.yml

@ -125,9 +125,15 @@
tags: bootstrap-os
# Todo : selinux configuration
- name: Confirm selinux deployed
stat:
path: /etc/selinux/config
when: ansible_os_family == "RedHat"
register: slc
- name: Set selinux policy to permissive
selinux: policy=targeted state=permissive
when: ansible_os_family == "RedHat"
when: ansible_os_family == "RedHat" and slc.stat.exists == True
changed_when: False
tags: bootstrap-os

Loading…
Cancel
Save