Allow barbican to access /opt/nfast when selinux is enforcing

Change-Id: I29deabd99efecadadfd1c91d3419c04226045f9c
2019-09-04 11:15:15 -05:00 · 2019-09-04 11:15:15 -05:00 · fba3cdcfd7
parent 93f475c08d
commit fba3cdcfd7
1 changed files with 7 additions and 0 deletions
--- a/tasks/client.yaml
+++ b/tasks/client.yaml
@ -18,6 +18,13 @@
      create_home: true
      home: /opt/nfast

+- name: set selinux bool to allow barbican containers to access /opt/nfast
+  seboolean:
+      name: os_barbican_write_pki
+      state: yes
+      persistent: yes
+  when: ansible_os_family | lower = 'redhat'
+
 - name: Download Thales client tarball
  get_url:
      url: "{{ thales_client_tarball_location }}"