ansible-collections/community.general
1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2025-04-25 20:01:25 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

add correct SELinux file context for crontabs (#4511) (#4595)

Browse source
This commit is contained in:
ekultails 2016-11-29 08:54:05 -05:00 • committed by Matt Clay
parent cc334a078b
commit 0358919db8
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
lib/ansible/modules/system/cron.py
View file

@ -233,6 +233,12 @@ import tempfile
import platform import platform
import pipes import pipes
try:
import selinux
HAS_SELINUX = True
except ImportError:
HAS_SELINUX = False
CRONCMD = "/usr/bin/crontab" CRONCMD = "/usr/bin/crontab"
class CronTabError(Exception): class CronTabError(Exception):
@ -334,6 +340,10 @@ class CronTab(object):
if rc != 0: if rc != 0:
self.module.fail_json(msg=err) self.module.fail_json(msg=err)
# set SELinux permissions
if HAS_SELINUX:
selinux.selinux_lsetfilecon_default(self.cron_file)
def do_comment(self, name): def do_comment(self, name):
return "%s%s" % (self.ansible, name) return "%s%s" % (self.ansible, name)