seboolean – Toggles SELinux booleans
Synopsis
- Toggles SELinux booleans.
Requirements
The below requirements are needed on the host that executes this module.
- libselinux-python
- libsemanage-python
Parameters
| Parameter | Choices/Defaults | Comments |
|---|---|---|
| ignore_selinux_state
boolean
added in 2.8
|
|
Useful for scenarios (chrooted environment) that you can't get the real SELinux state.
|
| name
- / required
|
Name of the boolean to configure.
|
|
| persistent
boolean
|
|
Set to yes if the boolean setting should survive a reboot.
|
| state
boolean / required
|
|
Desired boolean value
|
Notes
Note
- Not tested on any Debian based system.
Examples
- name: Set httpd_can_network_connect flag on and keep it persistent across reboots
seboolean:
name: httpd_can_network_connect
state: yes
persistent: yes
Status
- This module is guaranteed to have no backward incompatible interface changes going forward. [stableinterface]
- This module is maintained by the Ansible Core Team. [core]
Red Hat Support
More information about Red Hat’s support of this module is available from this Red Hat Knowledge Base article.
Authors
- Stephen Fromm (@sfromm)
Hint
If you notice any issues in this documentation you can edit this document to improve it.
© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/2.8/modules/seboolean_module.html