ansible-role-wireguard/files/selinux_wireguard_firewall-cmd.sh

10 lines
399 B
Bash
Executable file

#!/usr/bin/env bash
systemctl stop wg-quick@wg0.service
semanage permissive -e wireguard_t
systemctl start wg-quick@wg0.service
grep wireguard /var/log/audit/audit.log | audit2allow -M wireguard_firewall-cmd
systemctl stop wg-quick@wg0.service
semodule -i wireguard_firewall-cmd.pp
semanage permissive -d wireguard_t
semodule -l | grep -c wireguard_firewall-cmd
systemctl start wg-quick@wg0.service