Преглед на файлове

Do not disable SELinux on RedHat systems

It looks like SELinux can be left running without any (so far) negative
effects on our Matrix services.

There's no need to use `:z` or `:Z` options when mounting volumes either.
This means that files we create are labeled with a default context
(which may not be ideal if we only want them used from containers),
but it's compatible and doesn't cause issues.

Relabelling files is probably something we wish to stay away from,
especially for things like the media store, which contains lots of
files and is possibly on a fuse-mounted (S3/goofys) filesystem.
pull/54/head
Slavi Pantaleev преди 7 години
родител
ревизия
9f163b2bf5
променени са 1 файла, в които са добавени 0 реда и са изтрити 4 реда
  1. +0
    -4
      roles/matrix-server/tasks/setup/setup_base.yml

+ 0
- 4
roles/matrix-server/tasks/setup/setup_base.yml Целия файл

@@ -79,7 +79,3 @@
name: "{{ 'ntpd' if ansible_os_family == 'RedHat' else 'ntp' }}"
state: started
enabled: yes

- name: Ensure SELinux disabled
selinux: state=disabled
when: ansible_os_family == 'RedHat'

Зареждане…
Отказ
Запис