From: David Galloway <dgallowa@redhat.com>
Date: Thu, 2 Mar 2017 19:02:45 +0000 (-0500)
Subject: common: Delete leftover SELinux policy modules
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=refs%2Fpull%2F309%2Fhead;p=ceph-cm-ansible.git

common: Delete leftover SELinux policy modules

Jobs were occasionally failing due to
/etc/selinux/targeted/active/modules/400/mod_fastcgi/lang_ext being
corrupt.  mod_fastcgi is removed and reinstalled with every
testnodes.yml run anyway so this just makes sure valid SELinux policy
modules are put in place.

Fixes: http://tracker.ceph.com/issues/19126

Signed-off-by: David Galloway <dgallowa@redhat.com>
---

diff --git a/roles/common/tasks/nrpe-selinux.yml b/roles/common/tasks/nrpe-selinux.yml
index e8f39268..4cd0dbe0 100644
--- a/roles/common/tasks/nrpe-selinux.yml
+++ b/roles/common/tasks/nrpe-selinux.yml
@@ -20,6 +20,15 @@
     state: yes
     persistent: yes
 
+# See http://tracker.ceph.com/issues/19126
+- name: nrpe - Clean up cephlab SELinux policy modules
+  file:
+    path: "/etc/selinux/targeted/active/modules/400/{{ item }}"
+    state: absent
+  with_items:
+    - mod_fastcgi
+    - nrpe
+
 - name: nrpe - Remove SELinux policy package
   command: semodule -r nrpe
   failed_when: false