use lgetfilecon_raw instead of lgetfilecon to not depend on local level translation

If SELinux is enabled and mcstrans is running, daemons are restarted on each
run. After further debugging, it turn out that ansible compare the untranslated
level 's0' with the translated level 'SystemLow' due to mcstrans being running,
which trigger a handler since this is considered as a change.
pull/3766/head
Michael Scherer 11 years ago
parent 56a00e0667
commit 3fb2da6359

@ -315,7 +315,7 @@ class AnsibleModule(object):
if not HAVE_SELINUX or not self.selinux_enabled():
return context
try:
ret = selinux.lgetfilecon(self._to_filesystem_str(path))
ret = selinux.lgetfilecon_raw(self._to_filesystem_str(path))
except OSError, e:
if e.errno == errno.ENOENT:
self.fail_json(path=path, msg='path %s does not exist' % path)

Loading…
Cancel
Save