add correct SELinux file context for crontabs (#4511) (#4595)

This commit is contained in:
ekultails 2016-11-29 08:54:05 -05:00 committed by Matt Clay
parent cc334a078b
commit 0358919db8

View file

@ -233,6 +233,12 @@ import tempfile
import platform
import pipes
try:
import selinux
HAS_SELINUX = True
except ImportError:
HAS_SELINUX = False
CRONCMD = "/usr/bin/crontab"
class CronTabError(Exception):
@ -334,6 +340,10 @@ class CronTab(object):
if rc != 0:
self.module.fail_json(msg=err)
# set SELinux permissions
if HAS_SELINUX:
selinux.selinux_lsetfilecon_default(self.cron_file)
def do_comment(self, name):
return "%s%s" % (self.ansible, name)