From: David Galloway <dgallowa@redhat.com>
Date: Sun, 22 Mar 2020 14:17:05 +0000 (-0400)
Subject: nameserver: Configure selinux only if enabled
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=refs%2Fpull%2F552%2Fhead;p=ceph-cm-ansible.git

nameserver: Configure selinux only if enabled

Signed-off-by: David Galloway <dgallowa@redhat.com>
---

diff --git a/roles/nameserver/tasks/config.yml b/roles/nameserver/tasks/config.yml
index bfbd2cb3..9e0fe3ab 100644
--- a/roles/nameserver/tasks/config.yml
+++ b/roles/nameserver/tasks/config.yml
@@ -27,6 +27,9 @@
     name: named_write_master_zones
     state: yes
     persistent: yes
+  when:
+    - ansible_selinux.status is defined
+    - ansible_selinux.status == "enabled"
 
 # Helps prevent accidental DoS
 - name: Double maximum configured connections