sap_hana_backint: Implement RHEL fapolicy steps if required

[marcelmamula]

Details

This role contained unfinished steps for handling fapolicy on RHEL systems during setup, but it was not implemented and snippet was removed.

As per comment #50 (comment) , it would be still worth investigating if it is required and add it as step for RHEL systems.

Caution

This code contains hardcoded python path, so this is not simple copy paste.

Code snippet

- name: SAP HANA Backint - Setup - Update fapolicy rules for backint
  block:
    - name: check fapolicy service
      stat:
        path: /run/fapolicyd/fapolicyd.fifo
      register: fa_fifo
    - name: check fapolicy rules file
      stat:
        path: /etc/fapolicyd/fapolicyd.rules
      register: fa_rules
    - name: update fapolicy rules
      blockinfile:
        path: /etc/fapolicyd/fapolicyd.rules
        marker: "# {mark} Allow backint"
        block: |
          allow perm=open exe=/usr/libexec/platform-python3.6 : dir={{ sap_hana_backint_setup_backint_directory }}/
        insertbefore: '^# Only allow known ELF libs' #Hardcoded.
      when: fa_rules.stat.exists
      register: fapolicy_res
    - name: update fapolicy db
      shell: /usr/sbin/fapolicyd-cli --update
      when: fa_fifo.stat.exists and fapolicy_res.changed