You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
ansible/test/integration/targets/sefcontext/tasks/sefcontext.yml

101 lines
2.3 KiB
YAML

# (c) 2016, Dag Wieers <dag@wieers.com>
# This file is part of Ansible
#
# Ansible is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# Ansible is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with Ansible. If not, see <http://www.gnu.org/licenses/>.
- name: Ensure we start with a clean state
sefcontext:
path: '/tmp/foo/bar(/.*)?'
setype: httpd_sys_content_t
state: absent
- name: Set SELinux file context of foo/bar
sefcontext:
path: '/tmp/foo/bar(/.*)?'
setype: httpd_sys_content_t
state: present
reload: no
register: first
- assert:
that:
- first|changed
- first.setype == 'httpd_sys_content_t'
- name: Set SELinux file context of foo/bar (again)
sefcontext:
path: '/tmp/foo/bar(/.*)?'
setype: httpd_sys_content_t
state: present
reload: no
register: second
- assert:
that:
- not second|changed
- second.setype == 'httpd_sys_content_t'
- name: Change SELinux file context of foo/bar
sefcontext:
path: '/tmp/foo/bar(/.*)?'
setype: unlabeled_t
state: present
reload: no
register: third
- assert:
that:
- third|changed
- third.setype == 'unlabeled_t'
- name: Change SELinux file context of foo/bar (again)
sefcontext:
path: '/tmp/foo/bar(/.*)?'
setype: unlabeled_t
state: present
reload: no
register: fourth
- assert:
that:
- not fourth|changed
- fourth.setype == 'unlabeled_t'
- name: Delete SELinux file context of foo/bar
sefcontext:
path: '/tmp/foo/bar(/.*)?'
setype: httpd_sys_content_t
state: absent
reload: no
register: fifth
- assert:
that:
- fifth|changed
- fifth.setype == 'httpd_sys_content_t'
- name: Delete SELinux file context of foo/bar (again)
sefcontext:
path: '/tmp/foo/bar(/.*)?'
setype: unlabeled_t
state: absent
reload: no
register: sixth
- assert:
that:
- not sixth|changed
- sixth.setype == 'unlabeled_t'