From d44db1188295ed7bd7143b961dd1c6cba1a71c56 Mon Sep 17 00:00:00 2001 From: David Galloway Date: Fri, 22 Apr 2016 18:50:10 -0400 Subject: [PATCH] testnode: Update SELinux policy when configuring NRPE The 'nagios_run_sudo' boolean was added after RHEL7.1 GA. https://rhn.redhat.com/errata/RHBA-2015-1140.html Attempting to set the boolean when it's not present causes ansible to fail. NRPE will cause SELinux failures in test jobs unless set so the only other option would be to disable NRPE on RHEL/CentOS <= 7.1 This change ensures the testnode has the latest version of SELinux policy installed, and thus, ensuring the boolean exists. Signed-off-by: David Galloway --- roles/testnode/tasks/nrpe-selinux.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/roles/testnode/tasks/nrpe-selinux.yml b/roles/testnode/tasks/nrpe-selinux.yml index 2fd781a..877aa2e 100644 --- a/roles/testnode/tasks/nrpe-selinux.yml +++ b/roles/testnode/tasks/nrpe-selinux.yml @@ -9,6 +9,11 @@ pkg: policycoreutils-python state: installed +- name: nrpe - Ensure SELinux policy is up to date + yum: + pkg: selinux-policy-targeted + state: latest + - name: nrpe - Set SELinux boolean nagios_run_sudo true seboolean: name: nagios_run_sudo -- 2.39.5