mirror of
https://github.com/ansible-collections/community.general.git
synced 2026-05-06 05:12:45 +00:00
use lgetfilecon_raw instead of lgetfilecon to not depend on local level translation
If SELinux is enabled and mcstrans is running, daemons are restarted on each run. After further debugging, it turn out that ansible compare the untranslated level 's0' with the translated level 'SystemLow' due to mcstrans being running, which trigger a handler since this is considered as a change.
This commit is contained in:
@@ -315,7 +315,7 @@ class AnsibleModule(object):
|
||||
if not HAVE_SELINUX or not self.selinux_enabled():
|
||||
return context
|
||||
try:
|
||||
ret = selinux.lgetfilecon(self._to_filesystem_str(path))
|
||||
ret = selinux.lgetfilecon_raw(self._to_filesystem_str(path))
|
||||
except OSError, e:
|
||||
if e.errno == errno.ENOENT:
|
||||
self.fail_json(path=path, msg='path %s does not exist' % path)
|
||||
|
||||
Reference in New Issue
Block a user