Include ganesha dbus config file

This file was (accidentally) not included in a previous
commit 87b1da09e7131ec2741f332fd72aaec8de65e526.

diff --git a/roles/ceph-nfs/files/org.ganesha.nfsd.conf b/roles/ceph-nfs/files/org.ganesha.nfsd.conf
new file mode 100644 (file)
index 0000000..8d952b0
--- /dev/null
+++ b/roles/ceph-nfs/files/org.ganesha.nfsd.conf
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->
+
+<!DOCTYPE busconfig PUBLIC
+ "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+  <!-- Only root can own the service -->
+  <policy user="root">
+    <allow own="org.ganesha.nfsd"/>
+    <allow send_destination="org.ganesha.nfsd"/>
+
+    <allow send_destination="org.ganesha.nfsd"
+           send_interface="org.freedesktop.DBus.Introspectable"/>
+
+    <allow send_destination="org.ganesha.nfsd"
+           send_interface="org.ganesha.nfsd.CBSIM"/>
+
+    <allow send_destination="org.ganesha.nfsd"
+           send_interface="org.ganesha.nfsd.admin"/>
+  </policy>
+</busconfig>

diff --git a/roles/ceph-nfs/tasks/pre_requisite_container.yml b/roles/ceph-nfs/tasks/pre_requisite_container.yml
index 85dbb373bbae5fc6b19dbd922967005284c5e775..50e5f264ce42139e5346c7fad51bb80d3a951866 100644 (file)
--- a/roles/ceph-nfs/tasks/pre_requisite_container.yml
+++ b/roles/ceph-nfs/tasks/pre_requisite_container.yml
@@ -40,8 +40,8 @@
 
 - name: create dbus service file
   become: true
-  template:
-    src: "{{ role_path }}/templates/org.ganesha.nfsd.conf"
+  copy:
+    src: "org.ganesha.nfsd.conf"
     dest: /etc/dbus-1/system.d/org.ganesha.nfsd.conf
     owner: "root"
     group: "root"