Fix SELinux context for PostgreSQL

2024-01-07 19:24:04 +01:00 · 2024-01-07 19:24:04 +01:00 · 4f55153783
parent 6f0cf7d827
commit 4f55153783
1 changed files with 10 additions and 0 deletions
--- a/roles/postgresql/tasks/main.yml
+++ b/roles/postgresql/tasks/main.yml
@ -41,14 +41,24 @@
  ansible.builtin.file:
    path: "{{ postgresql_pgdata }}"
    owner: postgres
+    group: postgres
    mode: u=rwx,go=
+    seuser: system_u
+    serole: object_r
+    setype: postgresql_db_t
+    selevel: s0
    state: directory

 - name: Create WAL archive directory
  ansible.builtin.file:
    path: "{{ postgresql_wal_archive }}"
    owner: postgres
+    group: postgres
    mode: u=rwx,go=
+    seuser: system_u
+    serole: object_r
+    setype: postgresql_db_t
+    selevel: s0
    state: directory

 - name: Initialize database