ACIL FM

Nama	Ukuran	Aksi
__pycache__	-	Open
apparmor.py	1.35 MB	View DL Edit
caps.py	2.47 MB	View DL Edit
chroot.py	1.53 MB	View DL Edit
cmdline.py	2.63 MB	View DL Edit
date_time.py	3.04 MB	View DL Edit
distribution.py	32 MB	View DL Edit
dns.py	2.68 MB	View DL Edit
env.py	1.21 MB	View DL Edit
fips.py	1.37 MB	View DL Edit
loadavg.py	822 B	View DL Edit
local.py	4.16 MB	View DL Edit
lsb.py	3.45 MB	View DL Edit
pkg_mgr.py	7.32 MB	View DL Edit
platform.py	4.05 MB	View DL Edit
python.py	2.02 MB	View DL Edit
selinux.py	3.23 MB	View DL Edit
service_mgr.py	6.37 MB	View DL Edit
ssh_pub_keys.py	2.24 MB	View DL Edit
user.py	1.9 MB	View DL Edit
__init__.py	0 B	View DL Edit

Edit file: /usr/lib/python3.9/site-packages/ansible/module_utils/facts/system/selinux.py

# Collect facts related to selinux
#
# This file is part of Ansible
#
# Ansible is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# Ansible is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with Ansible.  If not, see <http://www.gnu.org/licenses/>.

from __future__ import (absolute_import, division, print_function)
__metaclass__ = type

import ansible.module_utils.compat.typing as t

from ansible.module_utils.facts.collector import BaseFactCollector

try:
    from ansible.module_utils.compat import selinux
    HAVE_SELINUX = True
except ImportError:
    HAVE_SELINUX = False

SELINUX_MODE_DICT = {
    1: 'enforcing',
    0: 'permissive',
    -1: 'disabled'
}

class SelinuxFactCollector(BaseFactCollector):
    name = 'selinux'
    _fact_ids = set()  # type: t.Set[str]

def collect(self, module=None, collected_facts=None):
        facts_dict = {}
        selinux_facts = {}

# If selinux library is missing, only set the status and selinux_python_present since
        # there is no way to tell if SELinux is enabled or disabled on the system
        # without the library.
        if not HAVE_SELINUX:
            selinux_facts['status'] = 'Missing selinux Python library'
            facts_dict['selinux'] = selinux_facts
            facts_dict['selinux_python_present'] = False
            return facts_dict

# Set a boolean for testing whether the Python library is present
        facts_dict['selinux_python_present'] = True

if not selinux.is_selinux_enabled():
            selinux_facts['status'] = 'disabled'
        else:
            selinux_facts['status'] = 'enabled'

try:
                selinux_facts['policyvers'] = selinux.security_policyvers()
            except (AttributeError, OSError):
                selinux_facts['policyvers'] = 'unknown'

try:
                (rc, configmode) = selinux.selinux_getenforcemode()
                if rc == 0:
                    selinux_facts['config_mode'] = SELINUX_MODE_DICT.get(configmode, 'unknown')
                else:
                    selinux_facts['config_mode'] = 'unknown'
            except (AttributeError, OSError):
                selinux_facts['config_mode'] = 'unknown'

try:
                mode = selinux.security_getenforce()
                selinux_facts['mode'] = SELINUX_MODE_DICT.get(mode, 'unknown')
            except (AttributeError, OSError):
                selinux_facts['mode'] = 'unknown'

try:
                (rc, policytype) = selinux.selinux_getpolicytype()
                if rc == 0:
                    selinux_facts['type'] = policytype
                else:
                    selinux_facts['type'] = 'unknown'
            except (AttributeError, OSError):
                selinux_facts['type'] = 'unknown'

facts_dict['selinux'] = selinux_facts
        return facts_dict

Batal