We don't need to check if selinux is enforcing

Just configure the seboolean, it'll be useful regardless if selinux
is enforcing or not.

Change-Id: I5fcb5e91ef4d5812df30442cc5a9663a5cbd77ca
This commit is contained in:
David Moreau Simard 2018-04-25 18:35:08 -04:00
parent 9f7de54e15
commit 58d1ec51bb
No known key found for this signature in database
GPG Key ID: 33A07694CBB71ECC
1 changed files with 1 additions and 9 deletions

View File

@ -5,20 +5,12 @@
state: "present"
with_items: "{{ required_wsgi_packages }}"
- name: Get status of selinux
become: true
command: getenforce
register: selinux_status
when: ansible_os_family == "RedHat"
- name: Set selinux boolean to allow Apache to manage the files
become: true
seboolean:
name: httpd_unified
state: yes
when:
- ansible_os_family == "RedHat"
- selinux_status.stdout == "Enforcing"
when: ansible_os_family == "RedHat"
- name: Get the location of the WSGI script
command: which ara-wsgi