Skip to content

Commit 063c2d0

Browse files
authored
SELinux state should now be correctly set back to enforcing (#351)
1 parent c2b8eb7 commit 063c2d0

File tree

2 files changed

+5
-6
lines changed

2 files changed

+5
-6
lines changed

CHANGELOG.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,10 @@ ENHANCEMENTS:
1414

1515
Switch NGINX keysites and OSS default repository data from a dictionary to individual variables to prevent potential issues arisen from Jinja2 dictionary run-time evaluations.
1616

17+
BUG FIXES:
18+
19+
Fix issue whereas SELinux state would not be correctly set back to `enforcing` when `nginx_selinux: true`.
20+
1721
## 0.18.0 (November 13, 2020)
1822

1923
BREAKING CHANGES:

tasks/prerequisites/setup-selinux.yml

Lines changed: 1 addition & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -21,8 +21,6 @@
2121
selinux:
2222
state: permissive
2323
policy: targeted
24-
changed_when: false
25-
when: ansible_facts['selinux']['mode'] == "enforcing"
2624

2725
- name: Allow SELinux HTTP network connections
2826
seboolean:
@@ -96,7 +94,4 @@
9694
selinux:
9795
state: enforcing
9896
policy: targeted
99-
changed_when: false
100-
when:
101-
- nginx_selinux_enforcing | bool
102-
- ansible_facts['selinux']['mode'] == "permissive"
97+
when: nginx_selinux_enforcing | bool

0 commit comments

Comments
 (0)