Selinux boolean for haproxy.

2026-05-16 13:56:03 +08:00 · 2015-01-06 19:45:58 +00:00
parent 59b0fd4bfa
commit 29a347fbb4
1 changed files with 14 additions and 0 deletions
--- a/roles/haproxy/tasks/main.yml
+++ b/roles/haproxy/tasks/main.yml
@@ -47,3 +47,17 @@
  - { file: 503.http, dest: /etc/haproxy/503.http }
  tags:
  - haproxy
+
+- name: Install libsemanage-python so we can manage selinux with python...
+  yum: name=libsemanage-python state=installed
+  tags:
+  - haproxy
+  - selinux
+
+- name: Turn on certain selinux booleans so haproxy can bind to ports
+  seboolean: name={{ item }} state=true persistent=true
+  with_items:
+  - haproxy_connect_any
+  tags:
+  - haproxy
+  - selinux