tripleo-ansible/tripleo_ansible/roles/tripleo_network_config/tasks
Cédric Jeanneret 608fdfae85 Ensure we get the relevant fcontext overrides
Until now, running a restorecon could break the SELinux labels. In order
to avoid such an issue, we can override the existing rules pushed in
/etc/selinux/targeted/contexts/ using fcontext. It makes the change
persistent across reboots.

Please note the following:
- sefcontext triggers a policy reload
- fcontext doesn't actually apply the labels
- creating the fcontext entry before creating the file allows to get the
  file created with the right labels directly
- we have to ensure SELinux is enabled on the host before actually
  creating the rules.

Change-Id: I6ce262a6e77a4d40b6ff246240d21390289cc54b
2021-06-18 12:47:02 +02:00
..
main.yml Ensure we get the relevant fcontext overrides 2021-06-18 12:47:02 +02:00
os_net_config.yml Handle network config override 2021-02-13 11:02:35 +05:30