Docs4dev
Docs
ansible / 2.4 / sefcontext_module.html

sefcontext - Manages SELinux file context mapping definitions

New in version 2.2.

Synopsis

  • Manages SELinux file context mapping definitions.
  • Similar to the semanage fcontext command.

Requirements (on host that executes module)

  • libselinux-python
  • policycoreutils-python

Options

parameter required default choices comments
ftype
 no a
File type.
reload
 no yes
  • yes
  • no
Reload SELinux policy after commit.
selevel
 no
SELinux range for the specified target.
aliases: serange
setype
 yes
SELinux type for the specified target.
seuser
 no
SELinux user for the specified target.
state
 no present
  • absent
  • present
Desired boolean value.
target
 yes
Target path (expression).
aliases: path

Examples

# Allow apache to modify files in /srv/git_repos
- sefcontext:
    target: '/srv/git_repos(/.*)?'
    setype: httpd_git_rw_content_t
    state: present

Notes

Note

  • The changes are persistent across reboots

Status

This module is flagged as preview which means that it is not guaranteed to have a backwards compatible interface.

For help in developing on modules, should you be so inclined, please read Community Information & Contributing, Testing Ansible and Developing Modules.

© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/2.4/sefcontext_module.html