collection 교체

collection/community/general/tests/integration/targets/sefcontext/aliases

@@ -1,3 +1,7 @@
+# Copyright (c) Ansible Project
+# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+azp/posix/2
 needs/root
-shippable/posix/group2
 skip/aix

collection/community/general/tests/integration/targets/sefcontext/meta/main.yml

@@ -1,2 +1,7 @@
+---
+# Copyright (c) Ansible Project
+# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
+# SPDX-License-Identifier: GPL-3.0-or-later
+
 dependencies:
   - setup_pkg_mgr

collection/community/general/tests/integration/targets/sefcontext/tasks/main.yml

@@ -1,24 +1,12 @@
+---
 ####################################################################
 # WARNING: These are designed specifically for Ansible tests       #
 # and should not be used as examples of how to write Ansible roles #
 ####################################################################
 
-# (c) 2016, Dag Wieers <dag@wieers.com>
-
-# This file is part of Ansible
-#
-# Ansible is free software: you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# Ansible is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with Ansible.  If not, see <http://www.gnu.org/licenses/>.
+# Copyright (c) 2016, Dag Wieers <dag@wieers.com>
+# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
+# SPDX-License-Identifier: GPL-3.0-or-later
 
 # FIXME: Unfortunately ansible_selinux could be a boolean or a dictionary !
 - debug:
@@ -29,5 +17,5 @@
     msg: SELinux is {{ ansible_selinux.status }}
   when: ansible_selinux is defined and ansible_selinux != False
 
-- include: sefcontext.yml
+- include_tasks: sefcontext.yml
   when: ansible_selinux is defined and ansible_selinux != False and ansible_selinux.status == 'enabled'

collection/community/general/tests/integration/targets/sefcontext/tasks/sefcontext.yml

@@ -1,19 +1,7 @@
-# (c) 2016, Dag Wieers <dag@wieers.com>
-
-# This file is part of Ansible
-#
-# Ansible is free software: you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# Ansible is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with Ansible.  If not, see <http://www.gnu.org/licenses/>.
+---
+# Copyright (c) 2016, Dag Wieers <dag@wieers.com>
+# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
+# SPDX-License-Identifier: GPL-3.0-or-later
 
 - name: install requirements for RHEL
   package:
@@ -35,12 +23,17 @@
     setype: httpd_sys_content_t
     state: absent
 
+- name: Ensure we start with a clean state
+  sefcontext:
+    path: /tmp/foo
+    state: absent
+
 - name: Set SELinux file context of foo/bar
   sefcontext:
     path: '/tmp/foo/bar(/.*)?'
     setype: httpd_sys_content_t
     state: present
-    reload: no
+    reload: false
   register: first
 
 - assert:
@@ -53,7 +46,7 @@
     path: '/tmp/foo/bar(/.*)?'
     setype: httpd_sys_content_t
     state: present
-    reload: no
+    reload: false
   register: second
 
 - assert:
@@ -66,7 +59,7 @@
     path: '/tmp/foo/bar(/.*)?'
     setype: unlabeled_t
     state: present
-    reload: no
+    reload: false
   register: third
 
 - assert:
@@ -79,7 +72,7 @@
     path: '/tmp/foo/bar(/.*)?'
     setype: unlabeled_t
     state: present
-    reload: no
+    reload: false
   register: fourth
 
 - assert:
@@ -92,7 +85,7 @@
     path: '/tmp/foo/bar(/.*)?'
     setype: httpd_sys_content_t
     state: absent
-    reload: no
+    reload: false
   register: fifth
 
 - assert:
@@ -105,10 +98,136 @@
     path: '/tmp/foo/bar(/.*)?'
     setype: unlabeled_t
     state: absent
-    reload: no
+    reload: false
   register: sixth
 
 - assert:
     that:
     - sixth is not changed
     - sixth.setype == 'unlabeled_t'
+
+- name: Set SELinux file context path substitution of foo
+  sefcontext:
+    path: /tmp/foo
+    substitute: /home
+    state: present
+    reload: false
+  register: subst_first
+
+- assert:
+    that:
+    - subst_first is changed
+    - subst_first.substitute == '/home'
+
+- name: Set SELinux file context path substitution of foo (again)
+  sefcontext:
+    path: /tmp/foo
+    substitute: /home
+    state: present
+    reload: false
+  register: subst_second
+
+- assert:
+    that:
+    - subst_second is not changed
+    - subst_second.substitute == '/home'
+
+- name: Change SELinux file context path substitution of foo
+  sefcontext:
+    path: /tmp/foo
+    substitute: /boot
+    state: present
+    reload: false
+  register: subst_third
+
+- assert:
+    that:
+    - subst_third is changed
+    - subst_third.substitute == '/boot'
+
+- name: Change SELinux file context path substitution of foo (again)
+  sefcontext:
+    path: /tmp/foo
+    substitute: /boot
+    state: present
+    reload: false
+  register: subst_fourth
+
+- assert:
+    that:
+    - subst_fourth is not changed
+    - subst_fourth.substitute == '/boot'
+
+- name: Try to delete non-existing SELinux file context path substitution of foo
+  sefcontext:
+    path: /tmp/foo
+    substitute: /dev
+    state: absent
+    reload: false
+  register: subst_fifth
+
+- assert:
+    that:
+    - subst_fifth is not changed
+    - subst_fifth.substitute == '/dev'
+
+- name: Delete SELinux file context path substitution of foo
+  sefcontext:
+    path: /tmp/foo
+    substitute: /boot
+    state: absent
+    reload: false
+  register: subst_sixth
+
+- assert:
+    that:
+    - subst_sixth is changed
+    - subst_sixth.substitute == '/boot'
+
+- name: Delete SELinux file context path substitution of foo (again)
+  sefcontext:
+    path: /tmp/foo
+    substitute: /boot
+    state: absent
+    reload: false
+  register: subst_seventh
+
+- assert:
+    that:
+    - subst_seventh is not changed
+    - subst_seventh.substitute == '/boot'
+
+- name: Set SELinux file context path substitution of foo
+  sefcontext:
+    path: /tmp/foo
+    substitute: /home
+    state: present
+    reload: false
+  register: subst_eighth
+
+- assert:
+    that:
+    - subst_eighth is changed
+    - subst_eighth.substitute == '/home'
+
+- name: Delete SELinux file context path substitution of foo
+  sefcontext:
+    path: /tmp/foo
+    state: absent
+    reload: false
+  register: subst_ninth
+
+- assert:
+    that:
+    - subst_ninth is changed
+
+- name: Delete SELinux file context path substitution of foo (again)
+  sefcontext:
+    path: /tmp/foo
+    state: absent
+    reload: false
+  register: subst_tenth
+
+- assert:
+    that:
+    - subst_tenth is not changed