ansible.posix/plugins
Ondrej Mosnacek 53d47e1763 selinux: update kernel boot params when disabling/re-enabling SELinux
The ability to disable SELinux from userspace based on the configuration
file is being deprecated in favor of the selinux=0 kernel boot
parameter. (Note that this affects only the "full" disable; switching
to/from permissive mode will work the same as before.)

Therefore, add an 'update_kernel_param' module parameter that will cause
it to set/unset the kernel command-line parameter using grubby when
enabling/disabling SELinux. (An explicit parameter was chosen for
backwards compatibility.)

More information:
https://lore.kernel.org/selinux/157836784986.560897.13893922675143903084.stgit@chester/
https://fedoraproject.org/wiki/Changes/Remove_Support_For_SELinux_Runtime_Disable

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2021-09-20 10:09:54 +05:30
..
action synchronize: Use SSH args from SSH connection plugins (#223) 2021-08-11 10:45:52 +05:30
callback fix skippy callback deprecation warning 2020-08-21 16:24:35 -05:00
module_utils Fix sanity test for modules 2021-03-02 18:53:06 +05:30
modules selinux: update kernel boot params when disabling/re-enabling SELinux 2021-09-20 10:09:54 +05:30
shell csh: Define `ECHO and COMMAND_SEP` 2021-06-09 17:46:09 +05:30