From a7218e31cd660591ccecfdabfcb9a72c078098fe Mon Sep 17 00:00:00 2001 From: David Galloway Date: Thu, 2 Mar 2017 14:02:45 -0500 Subject: [PATCH] common: Delete leftover SELinux policy modules Jobs were occasionally failing due to /etc/selinux/targeted/active/modules/400/mod_fastcgi/lang_ext being corrupt. mod_fastcgi is removed and reinstalled with every testnodes.yml run anyway so this just makes sure valid SELinux policy modules are put in place. Fixes: http://tracker.ceph.com/issues/19126 Signed-off-by: David Galloway --- roles/common/tasks/nrpe-selinux.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/roles/common/tasks/nrpe-selinux.yml b/roles/common/tasks/nrpe-selinux.yml index e8f39268..4cd0dbe0 100644 --- a/roles/common/tasks/nrpe-selinux.yml +++ b/roles/common/tasks/nrpe-selinux.yml @@ -20,6 +20,15 @@ state: yes persistent: yes +# See http://tracker.ceph.com/issues/19126 +- name: nrpe - Clean up cephlab SELinux policy modules + file: + path: "/etc/selinux/targeted/active/modules/400/{{ item }}" + state: absent + with_items: + - mod_fastcgi + - nrpe + - name: nrpe - Remove SELinux policy package command: semodule -r nrpe failed_when: false -- 2.47.3