xoxys.cups/tasks/selinux.yml

---
- block:
    - name: Add SELinux file context mapping definitions
      sefcontext:
        target: "{{ item.target }}"
        setype: "{{ item.setype }}"
        state: present
      loop: "{{ cups_selinux_fcontext }}"
      notify: __cupsd_restart

    - name: Apply new SELinux file context to filesystem
      command: "restorecon {{ item }}"
      loop: "{{ cups_selinux_restorecon }}"
      changed_when: False
      notify: __cupsd_restart

    - name: Allow cups execmem/execstack
      seboolean:
        name: cups_execmem
        state: yes
        persistent: yes
      notify: __cupsd_restart
  become: True
  become_user: root