initial commit

defaults/main.yml

@@ -0,0 +1,4 @@
+---
+selinux_enabled: True
+selinux_policy: "targeted"
+selinux_state: "permissive"

tasks/main.yml

@@ -0,0 +1,2 @@
+---
+- import_tasks: setup.yml

tasks/setup.yml

@@ -0,0 +1,17 @@
+---
+- block:
+    - name: Set selinux policy
+      selinux:
+        policy: "{{ selinux_policy }}"
+        state: "{{ selinux_state }}"
+      register: __sestatus
+
+    - name: Add .autorelabel file (requires a reboot)
+      file:
+        path: /.autorelabel
+        state: touch
+      when:
+        - selinux_state == "enforcing"
+        - __sestatus.changed
+  become: True
+  become_user: root