W3cubDocs

/Ansible

sefcontext - Manages SELinux file context mapping definitions

New in version 2.2.

Synopsis

Manages SELinux file context mapping definitions Similar to the semanage fcontext command

Requirements (on host that executes module)

  • libselinux-python
  • policycoreutils-python

Options

parameter required default choices comments
ftype
no a
File type.
reload
no True
Reload SELinux policy after commit.
selevel
no
SELinux range for the specified target.
aliases: serange
setype
yes
SELinux type for the specified target.
seuser
no
SELinux user for the specified target.
state
no present
  • present
  • absent
Desired boolean value.
target
yes
Target path (expression).
aliases: path

Examples

# Allow apache to modify files in /srv/git_repos
- sefcontext: target='/srv/git_repos(/.*)?' setype=httpd_git_rw_content_t state=present

Notes

Note

The changes are persistent across reboots

This is an Extras Module

For more information on what this means please read Extras Modules

For help in developing on modules, should you be so inclined, please read Community Information & Contributing, developing_test_pr and Developing Modules.

© 2012–2016 Michael DeHaan
© 2016 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/sefcontext_module.html