You are reading an unmaintained version of the Ansible documentation. Unmaintained Ansible versions can contain unfixed security vulnerabilities (CVE). Please upgrade to a maintained version. See the latest Ansible documentation.

sefcontext - Manages SELinux file context mapping definitions¶

New in version 2.2.

Synopsis
Requirements (on host that executes module)
Options
Examples
Notes
- Status

Synopsis ¶

Manages SELinux file context mapping definitions.
Similar to the semanage fcontext command.

Requirements (on host that executes module)¶

libselinux-python

policycoreutils-python

Options ¶

parameter	required	default	choices	comments
ftype	no	a		File type.
reload	no	yes	yes no	Reload SELinux policy after commit.
selevel	no			SELinux range for the specified target. aliases: serange
setype	yes			SELinux type for the specified target.
seuser	no			SELinux user for the specified target.
state	no	present	absent present	Desired boolean value.
target	yes			Target path (expression). aliases: path

Examples ¶

# Allow apache to modify files in /srv/git_repos
- sefcontext:
    target: '/srv/git_repos(/.*)?'
    setype: httpd_git_rw_content_t
    state: present

Notes ¶

Note

The changes are persistent across reboots

Status ¶

This module is flagged as preview which means that it is not guaranteed to have a backwards compatible interface.

For help in developing on modules, should you be so inclined, please read Community Information & Contributing, Testing Ansible and Developing Modules.