Skip to content

Replace SELinux community module with LSR#303

Merged
spetrosi merged 1 commit intoredhat-cop:mainfrom
tomasfratrik:use-rhel-selinux-module
Jan 12, 2026
Merged

Replace SELinux community module with LSR#303
spetrosi merged 1 commit intoredhat-cop:mainfrom
tomasfratrik:use-rhel-selinux-module

Conversation

@tomasfratrik
Copy link
Contributor

@tomasfratrik tomasfratrik commented Dec 1, 2025

replacement of ansible.posix.selinux with lsr

Jira: RHEL-134411

@tomasfratrik tomasfratrik force-pushed the use-rhel-selinux-module branch from d28a4ff to 103f747 Compare December 8, 2025 15:27
@tomasfratrik tomasfratrik marked this pull request as ready for review December 8, 2025 15:27
@tomasfratrik tomasfratrik changed the title [DRAFT] Replace SELinux community module with Red Hat provided module. Replace SELinux community module with LSR Dec 8, 2025
@richm
Copy link
Collaborator

richm commented Dec 8, 2025

lgtm - you will need a changelog fragment

@tomasfratrik tomasfratrik force-pushed the use-rhel-selinux-module branch from 103f747 to ba40f1f Compare December 8, 2025 16:02
@tomasfratrik
Copy link
Contributor Author

lgtm - you will need a changelog fragment

Added, but I am not sure about conventions here

@richm
Copy link
Collaborator

richm commented Dec 8, 2025

[citest]

@richm
Copy link
Collaborator

richm commented Dec 9, 2025

This example explains how to use the selinux role when there is the possibility that the system needs to be rebooted to apply the changes: https://github.com/linux-system-roles/selinux/blob/main/examples/selinux-playbook.yml

  • define the selinux policy you need in a vars
  • run the role in a block with a rescue
  • in the rescue section, check if the role failed for a reason other than reboot required and fail if reboot not required
  • do the reboot if reboot required
  • wait for the connection
  • run the role again to ensure the settings are applied

@tomasfratrik tomasfratrik force-pushed the use-rhel-selinux-module branch 3 times, most recently from a7572f5 to d9ba1e7 Compare January 8, 2026 15:59
@tomasfratrik tomasfratrik force-pushed the use-rhel-selinux-module branch from d9ba1e7 to aa056b7 Compare January 9, 2026 13:51
@tomasfratrik
Copy link
Contributor Author

[citest]

@spetrosi spetrosi merged commit 15f25dd into redhat-cop:main Jan 12, 2026
25 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants