Allow barbican to access /opt/nfast when selinux is enforcing

Change-Id: I29deabd99efecadadfd1c91d3419c04226045f9c
2019-09-04 11:15:15 -05:00 · 2019-09-04 11:15:15 -05:00 · 0e864a4d0e
parent 93f475c08d
commit 0e864a4d0e
1 changed files with 6 additions and 0 deletions
--- a/tasks/client.yaml
+++ b/tasks/client.yaml
@ -18,6 +18,12 @@
      create_home: true
      home: /opt/nfast

+- name: set selinux bool to allow barbican containers to access /opt/nfast
+  seboolean:
+      name: os_barbican_write_pki
+      state: yes
+      persistent: yes
+
 - name: Download Thales client tarball
  get_url:
      url: "{{ thales_client_tarball_location }}"