??????????????
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 173
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 174
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 175
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 176
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 177
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 178
ó
àUdac @` sï d d l m Z m Z m Z e Z i d d 6d g d 6d d 6Z d Z d Z d
Z d d l
Z
d d l m Z m
Z
d d
l m Z d Z y d d l Z e Z Wn# e k
rÅ e
j ƒ Z e Z n Xd Z y d d l Z e Z Wn# e k
re
j ƒ Z e Z n Xe rfe j j d e j d e j d e j d e j d e j! d e j" d e j# d e j$ ƒ n e% d d d d d d d d d d d d d d d d ƒ Z& e d „ Z' d „ Z( d d! „ Z) d d" „ Z* d# „ Z+ e, d$ k rëe+ ƒ n d S(% i ( t absolute_importt divisiont print_functions 1.1t metadata_versiont previewt statust communityt supported_bysþ
---
module: sefcontext
short_description: Manages SELinux file context mapping definitions
description:
- Manages SELinux file context mapping definitions.
- Similar to the C(semanage fcontext) command.
version_added: '2.2'
options:
target:
description:
- Target path (expression).
type: str
required: yes
aliases: [ path ]
ftype:
description:
- The file type that should have SELinux contexts applied.
- "The following file type options are available:"
- C(a) for all files,
- C(b) for block devices,
- C(c) for character devices,
- C(d) for directories,
- C(f) for regular files,
- C(l) for symbolic links,
- C(p) for named pipes,
- C(s) for socket files.
type: str
choices: [ a, b, c, d, f, l, p, s ]
default: a
setype:
description:
- SELinux type for the specified target.
type: str
required: yes
seuser:
description:
- SELinux user for the specified target.
type: str
selevel:
description:
- SELinux range for the specified target.
type: str
aliases: [ serange ]
state:
description:
- Whether the SELinux file context must be C(absent) or C(present).
type: str
choices: [ absent, present ]
default: present
reload:
description:
- Reload SELinux policy after commit.
- Note that this does not apply SELinux file contexts to existing files.
type: bool
default: yes
ignore_selinux_state:
description:
- Useful for scenarios (chrooted environment) that you can't get the real SELinux state.
type: bool
default: no
version_added: '2.8'
notes:
- The changes are persistent across reboots.
- The M(sefcontext) module does not modify existing files to the new
SELinux context(s), so it is advisable to first create the SELinux
file contexts before creating files, or run C(restorecon) manually
for the existing files that require the new SELinux file contexts.
- Not applying SELinux fcontexts to existing files is a deliberate
decision as it would be unclear what reported changes would entail
to, and there's no guarantee that applying SELinux fcontext does
not pick up other unrelated prior changes.
requirements:
- libselinux-python
- policycoreutils-python
author:
- Dag Wieers (@dagwieers)
sÿ
- name: Allow apache to modify files in /srv/git_repos
sefcontext:
target: '/srv/git_repos(/.*)?'
setype: httpd_git_rw_content_t
state: present
- name: Apply new SELinux file context to filesystem
command: restorecon -irv /srv/git_repos
s
# Default return values
N( t
AnsibleModulet missing_required_lib( t to_nativet at bt ct dt ft lt pt ss all filess block devices character devicet directorys regular files
symbolic links
named pipes socket filec C` s | t k r t St j ƒ S( N( t Truet selinuxt is_selinux_enabled( t ignore_selinux_state( ( sE /usr/lib/python2.7/site-packages/ansible/modules/system/sefcontext.pyt get_runtime_status› s c C` sA | t | f } | j ƒ } y | | SWn t k
r< d SXd S( s` Get the SELinux file context mapping definition from policy. Return None if it does not exist. N( t option_to_file_type_strt get_allt KeyErrort None( t
sefcontextt targett ftypet recordt records( ( sE /usr/lib/python2.7/site-packages/ansible/modules/system/sefcontext.pyt semanage_fcontext_existsŸ s
t c C` s: t } d }
yªt j | ƒ } | j | ƒ t | | | ƒ } | r*| \ }
} } } | d k rj |
} n | d k r | } n | | k s£ | |
k s£ | | k rµ| j sÈ | j | | | | | ƒ n t } | j r'|
d 7}
|
d | | |
| | | f 7}
|
d | | | | | | f 7}
q'qµn‹ | d k r?d } n | d k rTd } n | j sy| j
| | | | | ƒ n t } | j rµ|
d 7}
|
d | | | d | | f 7}
n Wn9 t k
rñ} | j d d
| j
j t | ƒ f ƒ n X| j r|
rt d |
ƒ | d R? R* R@ R RA RB RC RD RE RF ( ( sE /usr/lib/python2.7/site-packages/ansible/modules/system/sefcontext.pyt semanage_fcontext_deleteß s&
:*c
C` s@ t d t d t d d d t ƒ d t d d d t d d
g ƒ d t d d d d d
t j ƒ ƒ d t d d d t ƒ d t d d ƒ d t d d d d g ƒ d t d d d d d
d d g ƒ d t d d d t ƒ ƒ d t ƒ } t s| j d t d ƒ d t ƒ n t
s(| j d t d ƒ d t ƒ n | j d } t
| ƒ sT| j d d ƒ n | j d } | j d } | j d } | j d } | j d } | j d } | j d } t d | d | d | d | ƒ } | d k rþt | | | | | | | | ƒ n> | d k r#t | | | | | ƒ n | j d d j | ƒ ƒ d S( Nt
argument_specR t typet boolt defaultR t strt requiredt aliasest pathR R t choicesR= R+ t selevelR, t statet presentt absentt reloadt supports_check_modeR' s libselinux-pythont exceptions policycoreutils-pythons! SELinux is disabled on this host.s& Invalid value of argument "state": {0}( R R9 R- R R t keyst HAVE_SELINUXR6 R t SELINUX_IMP_ERRt
HAVE_SEOBJECTt SEOBJECT_IMP_ERRt paramsR RG RI t format(
R; R R R R= R+ R, RT R> R< ( ( sE /usr/lib/python2.7/site-packages/ansible/modules/system/sefcontext.pyt mainþ s> !!
! " t __main__(- t
__future__R R R RK t
__metaclass__t ANSIBLE_METADATAt
DOCUMENTATIONt EXAMPLESt RETURNt tracebackt ansible.module_utils.basicR R t ansible.module_utils._textR
R R\ R R R[ t ImportErrort
format_excR- R^ R. R] t
file_typest updatet SEMANAGE_FCONTEXT_ALLt SEMANAGE_FCONTEXT_BLOCKt SEMANAGE_FCONTEXT_CHARt SEMANAGE_FCONTEXT_DIRt SEMANAGE_FCONTEXT_REGt SEMANAGE_FCONTEXT_LINKt SEMANAGE_FCONTEXT_PIPEt SEMANAGE_FCONTEXT_SOCKR9 R R R" RG RI Ra R8 ( ( ( sE /usr/lib/python2.7/site-packages/ansible/modules/system/sefcontext.pyt sd
O
4 +