nameserver: Configure selinux only if enabled

Signed-off-by: David Galloway <dgallowa@redhat.com>

diff --git a/roles/nameserver/tasks/config.yml b/roles/nameserver/tasks/config.yml
index bfbd2cb371509a0b003475b9d42d74ddd2522663..9e0fe3ab718a7b3df7d851cc866f047b3577ae8d 100644 (file)
--- a/roles/nameserver/tasks/config.yml
+++ b/roles/nameserver/tasks/config.yml
@@ -27,6 +27,9 @@
     name: named_write_master_zones
     state: yes
     persistent: yes
+  when:
+    - ansible_selinux.status is defined
+    - ansible_selinux.status == "enabled"
 
 # Helps prevent accidental DoS
 - name: Double maximum configured connections