Files
configpolicy/collectd.yml
Dustin C. Hatch c9dbaa32b9 collectd: Control SELinux domain permissiveness
It seems with each new release of Fedora, some feature or other of
*collectd* gets broken.  In Feodra 36, the *interfaces* plugin does not
seem to work reliably, and the *md* plugin logs a *lot* of errors.
While these issues are investigated upstream, we either need to manage
our own policy for collectd or mark the `collectd_t` domain permissive.
I chose the latter because I'm lazy and I don't consider collectd to be
that big of a threat to security.
2022-07-24 10:35:32 -05:00

38 lines
703 B
YAML

- hosts: collectd
roles:
- role: collectd
tags:
- collectd
- role: collectd-version
tags:
- collectd-version
- hosts: collectd-sensors
roles:
- role: collectd-sensors
tags:
- collectd
- collectd-sensors
- hosts: collectd-prometheus
roles:
- role: collectd-prometheus
tags:
- collectd
- collectd-prometheus
- hosts: collectd
tasks:
- name: ensure selinux permissive mode is set for collectd
selinux_permissive:
domain: collectd_t
permissive: '{{ collectd_selinux_permissive|d(false) }}'
tags:
- selinux
- name: ensure collectd is running
service:
name: collectd
state: started
tags:
- service