You've already forked ansible-role-common
Added block to only deal to SELinux if installed
This commit is contained in:
@@ -10,10 +10,23 @@
|
|||||||
with_items: "{{ common_packages }}"
|
with_items: "{{ common_packages }}"
|
||||||
tags: packages
|
tags: packages
|
||||||
|
|
||||||
- name: Ensure SELinux status
|
- name: Check if SELinux is installed
|
||||||
selinux:
|
stat:
|
||||||
state: disabled
|
path: /etc/selinux/config
|
||||||
register: sestate
|
register: se
|
||||||
|
tags: security
|
||||||
|
|
||||||
|
- name: SELinux Management
|
||||||
|
block:
|
||||||
|
- name: selinux | Ensure SELinux status
|
||||||
|
selinux:
|
||||||
|
state: disabled
|
||||||
|
register: sestate
|
||||||
|
- name: selinux | Message Output
|
||||||
|
debug:
|
||||||
|
msg: "SELinux {{ sestate.msg }}"
|
||||||
|
when: sestate.changed
|
||||||
|
when: se.stat.exists
|
||||||
tags: security
|
tags: security
|
||||||
|
|
||||||
- debug:
|
- debug:
|
||||||
|
|||||||
Reference in New Issue
Block a user