Revert "Add a custom policy for hackers using ansible-test (#68535)" (#81120)

This reverts commit bd9e31fcb0.
This commit is contained in:
Matt Clay 2023-06-23 17:36:36 -07:00 committed by GitHub
parent 82b5544b09
commit 7e2b25beac
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 0 additions and 50 deletions

2
.gitignore vendored
View File

@ -99,8 +99,6 @@ lib/ansible/_vendor/*
/test/integration/cloud-config-*.*
!/test/integration/cloud-config-*.*.template
.python-version
/hacking/tests/selinux/*.mod
/hacking/tests/selinux/*.pp
# Release directory
packaging/release/ansible_release
/.cache/

View File

@ -1,22 +0,0 @@
# ansible-podman selinux module
On Fedora-derived systems (and possibly others), selinux can prevent podman
from running the way we need it to for our tests to work.
Loading this module (hopefully) allows you to
[keep selinux enabled](https://stopdisablingselinux.com/) and still be able to
run our tests.
To use it, just run:
```
./build.sh
```
...which will build the module. Then run:
```
sudo semodule -i ansible-podman.pp
```
to insert and enable the module.

View File

@ -1,17 +0,0 @@
module ansible-podman 1.0;
require {
type container_t;
type cgroup_t;
type fusefs_t;
class dir { add_name create remove_name rmdir write };
class file { create relabelto write };
class bpf map_create;
}
allow container_t cgroup_t:dir { add_name create remove_name rmdir write };
allow container_t cgroup_t:file { create write };
allow container_t fusefs_t:file relabelto;
allow container_t self:bpf map_create;

View File

@ -1,9 +0,0 @@
#!/usr/bin/env bash
set -x
set -e
checkmodule -Mmo ansible-podman.mod ansible-podman.te
semodule_package -o ansible-podman.pp -m ansible-podman.mod
set +x
echo "Module built. Now run this as root:"
echo "semodule -i $(pwd)/ansible-podman.pp"