??????????????
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 173
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 174
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 175
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 176
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 177
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 178
σ
ΰUdac @` s: d d l m Z m Z m Z e Z i d d 6d g d 6d d 6Z d Z d Z d
Z d d l
Z
d d l Z d d l Z d d l
Z
d Z y d d l Z e Z Wn# e k
rΓ e
j Z e Z n Xd d l m Z m Z d d
l m Z d Z d Z d Z d Z d Z d Z e! d k r6e n d S( i ( t absolute_importt divisiont print_functions 1.1t metadata_versiont stableinterfacet statust coret supported_bys!
---
module: selinux
short_description: Change policy and state of SELinux
description:
- Configures the SELinux mode and policy.
- A reboot may be required after usage.
- Ansible will not issue this reboot but will let you know when it is required.
version_added: "0.7"
options:
policy:
description:
- The name of the SELinux policy to use (e.g. C(targeted)) will be required if state is not C(disabled).
state:
description:
- The SELinux mode.
required: true
choices: [ disabled, enforcing, permissive ]
configfile:
description:
- The path to the SELinux configuration file, if non-standard.
default: /etc/selinux/config
aliases: [ conf, file ]
requirements: [ libselinux-python ]
author:
- Derek Carter (@goozbach)
s
- name: Enable SELinux
selinux:
policy: targeted
state: enforcing
- name: Put SELinux in permissive mode, logging actions that would be blocked.
selinux:
policy: targeted
state: permissive
- name: Disable SELinux
selinux:
state: disabled
s
msg:
description: Messages that describe changes that were made.
returned: always
type: str
sample: Config SELinux state changed from 'disabled' to 'permissive'
configfile:
description: Path to SELinux configuration file.
returned: always
type: str
sample: /etc/selinux/config
policy:
description: Name of the SELinux policy.
returned: always
type: str
sample: targeted
state:
description: SELinux mode.
returned: always
type: str
sample: enforcing
reboot_required:
description: Whether or not an reboot is required for the changes to take effect.
returned: always
type: bool
sample: true
N( t
AnsibleModulet missing_required_lib( t get_file_linesc C` sV t | d t } x= | D]5 } t j d | } | r | j d d j Sq Wd S( Nt strips ^SELINUX=.*$t =i ( R
t Falset ret matcht splitR ( t
configfilet linest linet stateline( ( sB /usr/lib/python2.7/site-packages/ansible/modules/system/selinux.pyt get_config_statej s
c C` sV t | d t } x= | D]5 } t j d | } | r | j d d j Sq Wd S( NR s ^SELINUXTYPE=.*$R i ( R
R
R R R R ( R R R R ( ( sB /usr/lib/python2.7/site-packages/ansible/modules/system/selinux.pyt get_config_policys s
c
C` s d | } t | d t } t j \ } } t | d 8 } x. | D]& } | j t j d | | d qG WWd QX| j | | d S( Ns
SELINUX=%sR t ws ^SELINUX=.*s
( R
R
t tempfilet mkstempt opent writeR t subt atomic_move( t modulet stateR R R t tmpfdt tmpfilet
write_fileR ( ( sB /usr/lib/python2.7/site-packages/ansible/modules/system/selinux.pyt set_config_state} s
*c C` se | d k r t j d nE | d k r8 t j d n) | d k rG n d | } | j d | d S( Nt enforcingi t
permissivei t disableds& trying to set invalid runtime state %st msg( t selinuxt security_setenforcet fail_json( R R R' ( ( sB /usr/lib/python2.7/site-packages/ansible/modules/system/selinux.pyt set_state s
c
C` sΈ t j j d | s- | j d d | n d | } t | d t } t j \ } } t | d 8 } x. | D]& } | j t
j d | | d qt WWd QX| j | | d S( Ns /etc/selinux/%s/policyR' s) Policy %s does not exist in /etc/selinux/s SELINUXTYPE=%sR R s ^SELINUXTYPE=.*s
(
t ost patht existsR* R
R
R R R R R R R ( R t policyR t
policylineR R R! R" R ( ( sB /usr/lib/python2.7/site-packages/ansible/modules/system/selinux.pyt set_config_policy s
*c C` s t d t d t d d d t d d d d d d d
d g d t d d d
d d d d g d t } t s | j d t d d t n t } g } | j d } | j d } | j d } t j
} t j d } d } t } | rt j rd } qd
} n t
j j | sD| j d d j | d d n t | }
t | } | d k r| s| j d d qn | s|
} n | | k rΫ| j r»| j d t n | j d | | f t } n | |
k r6| j r| j d t n t | | | | j d | |
| f t } n | | k rό| rβ| d k r©| d
k r| j syt | d
n | j d | t } n
| j d t } qω| j sΒt | | n | j d | | f t } qό| j d! | t } n | | k rD| j s$t | | | n | j d" | | f t } n | j d | d d# j | d | d | d | d$ | d S(% Nt
argument_specR/ t typet strR t requiredt Truet choicesR$ R% R& R t defaults /etc/selinux/configt aliasest conft filet supports_check_modeR' s libselinux-pythont exceptioni s Unable to find file {0}t detailssS Please install SELinux-policy package, if this package is not installed previously.s- Policy is required if state is not 'disabled't changeds0 Running SELinux policy changed from '%s' to '%s's> SELinux policy configuration in '%s' changed from '%s' to '%s'sg SELinux state temporarily changed from '%s' to 'permissive'. State change will take effect next reboot.s1 SELinux state change will take effect next reboots' SELinux state changed from '%s' to '%s's/ Reboot is required to set SELinux state to '%s's. Config SELinux state changed from '%s' to '%s's , t reboot_required( R t dictR6 t HAS_SELINUXR* R t SELINUX_IMP_ERRR
t paramsR( t is_selinux_enabledt selinux_getpolicytypet security_getenforceR, R- t isfilet formatR R t
check_modet exit_jsont appendR1 R+ t warnR# t join( R R? t msgsR R/ R t runtime_enabledt runtime_policyt
runtime_stateR@ t
config_policyt config_state( ( sB /usr/lib/python2.7/site-packages/ansible/modules/system/selinux.pyt mainͺ s $$
t __main__(" t
__future__R R R R3 t
__metaclass__t ANSIBLE_METADATAt
DOCUMENTATIONt EXAMPLESt RETURNR, R R t tracebackt NoneRC R( R6 RB t ImportErrort
format_excR
t ansible.module_utils.basicR R t ansible.module_utils.facts.utilsR
R R R# R+ R1 RU t __name__( ( ( sB /usr/lib/python2.7/site-packages/ansible/modules/system/selinux.pyt s:
_