jpp/ansible-roles
1
0
Fork 0
mirror of https://git.lapiole.org/dani/ansible-roles.git synced 2025-06-28 22:13:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update to 2025-05-20 16:00

Browse Source
This commit is contained in:
Daniel Berteaud 2025-05-20 16:00:15 +02:00
parent 04250e0ba7
commit 23f39f1115
2 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
roles/samba/files/samba-dc.te
View File

@ -1,11 +1,14 @@
module samba-dc 1.0; module samba-dc 1.1;
require { require {
type ntpd_var_run_t; type ntpd_var_run_t;
type unconfined_service_t;
type chronyd_t; type chronyd_t;
class sock_file write; class sock_file write;
class unix_stream_socket connectto;
} }
#============= chronyd_t ============== #============= chronyd_t ==============
allow chronyd_t ntpd_var_run_t:sock_file write; allow chronyd_t ntpd_var_run_t:sock_file write;
allow chronyd_t unconfined_service_t:unix_stream_socket connectto;

1
roles/samba/tasks/selinux.yml
View File

@ -19,6 +19,7 @@
when: samba_role == 'dc' or samba_role == 'rodc' when: samba_role == 'dc' or samba_role == 'rodc'
with_items: with_items:
- samba_domain_controller - samba_domain_controller
- rsync_sys_admin
tags: samba tags: samba
- name: Copy custom policy - name: Copy custom policy