Merge "add sealert diagosis of selinux errors"
This commit is contained in:
commit
3b46f036ff
|
@ -284,9 +284,12 @@ artcl_commands:
|
|||
cmd: |
|
||||
systemctl list-units --full --all
|
||||
systemctl status "*"
|
||||
denials:
|
||||
selinux_denials:
|
||||
cmd: >
|
||||
grep -i denied /var/log/audit/audit*
|
||||
selinux_denials_detail:
|
||||
cmd: >
|
||||
sealert -a /var/log/extra/selinux_denials.txt
|
||||
seqfaults:
|
||||
cmd: >
|
||||
grep -v ansible-command /var/log/messages | grep segfault
|
||||
|
|
|
@ -27,6 +27,13 @@
|
|||
data: "{{ combined_cmds | dict2items|selectattr('key', 'in', collect_log_types) | list | items2dict }}"
|
||||
register: artcl_commands_flatten
|
||||
|
||||
- name: install setools
|
||||
ansible.builtin.package:
|
||||
name:
|
||||
- setools
|
||||
- setroubleshoot
|
||||
state: present
|
||||
|
||||
- name: Run artcl_commands
|
||||
# noqa 305
|
||||
# noqa 102 :: No Jinja2 in when
|
||||
|
|
Loading…
Reference in New Issue