mirror of
https://github.com/frappe/bench.git
synced 2024-11-12 00:06:36 +00:00
30 lines
830 B
YAML
30 lines
830 B
YAML
|
---
|
||
|
|
- name: Install deps
|
||
|
|
yum: name="{{item}}" state=present
|
||
|
|
with_items:
|
||
|
|
- policycoreutils-python
|
||
|
|
- selinux-policy-devel
|
||
|
|
when: ansible_distribution == 'CentOS'
|
||
|
|
|
||
|
|
- name: Install SELinux for Ubuntu
|
||
|
|
apt: name={{ item }} state=present
|
||
|
|
with_items:
|
||
|
|
- selinux
|
||
|
|
- selinux-policy-dev
|
||
|
|
when: ansible_distribution == 'Ubuntu'
|
||
|
|
|
||
|
|
- name: Check enabled SELinux modules
|
||
|
|
shell: semanage module -l
|
||
|
|
register: enabled_modules
|
||
|
|
|
||
|
|
- name: Copy frappe_selinux policy
|
||
|
|
copy: src=frappe_selinux.te dest=/root/frappe_selinux.te
|
||
|
|
register: dest_frappe_selinux_te
|
||
|
|
|
||
|
|
- name: Compile frappe_selinux policy
|
||
|
|
shell: "make -f /usr/share/selinux/devel/Makefile frappe_selinux.pp && semodule -i frappe_selinux.pp"
|
||
|
|
args:
|
||
|
|
chdir: /root/
|
||
|
|
when: "enabled_modules.stdout.find('frappe_selinux') == -1 or dest_frappe_selinux_te.changed"
|
||
|
|
|