don't install SELinux related packages if SELinux is disabled about ansible-role-nginx HOT 5 CLOSED

It could be nice to detect this and don't install python-selinux on Debian if it's the case

from ansible-role-nginx.

the getenforce command should do it:

getenforce reports whether SELinux is enforcing, permissive, or disabled.

so if that command doesn't exist or reports Disabled then selinux is turned off.

It seems to be Disabled , even though the manpage says disabled

from ansible-role-nginx.

There already is a built-in fact which can be used to check that. Here the relevant portion of the output of the setup module:

"ansible_selinux": {
    "config_mode": "enforcing", 
    "mode": "enforcing", 
    "policyvers": 30, 
    "status": "enabled", 
    "type": "targeted"
}

from ansible-role-nginx.

Thanks @exploide, if you can made a PR, it will be nice !

from ansible-role-nginx.

I will take a look when time allows it. Figured out I also have to address another SELinux related issue: Setting the nginx_worker_rlimit_nofile variable is forbidden unless a SELinux boolean is tweaked. Guess this can be done together.

from ansible-role-nginx.