tripleo-ansible/tripleo_ansible/roles/tripleo_unbound/molecule/default
Cédric Jeanneret 608fdfae85 Ensure we get the relevant fcontext overrides
Until now, running a restorecon could break the SELinux labels. In order
to avoid such an issue, we can override the existing rules pushed in
/etc/selinux/targeted/contexts/ using fcontext. It makes the change
persistent across reboots.

Please note the following:
- sefcontext triggers a policy reload
- fcontext doesn't actually apply the labels
- creating the fcontext entry before creating the file allows to get the
  file created with the right labels directly
- we have to ensure SELinux is enabled on the host before actually
  creating the rules.

Change-Id: I6ce262a6e77a4d40b6ff246240d21390289cc54b
2021-06-18 12:47:02 +02:00
..
converge.yml Add tripleo_unbound role 2021-03-06 01:12:51 +00:00
Dockerfile Add tripleo_unbound role 2021-03-06 01:12:51 +00:00
molecule.yml Ensure we get the relevant fcontext overrides 2021-06-18 12:47:02 +02:00
prepare.yml Add tripleo_unbound role 2021-03-06 01:12:51 +00:00