From 41c92d0060f7fac76fb1b4dbb7e3ee96046b17ab Mon Sep 17 00:00:00 2001
From: David Galloway <dgallowa@redhat.com>
Date: Sun, 22 Mar 2020 10:17:05 -0400
Subject: [PATCH] nameserver: Configure selinux only if enabled

Signed-off-by: David Galloway <dgallowa@redhat.com>
---
 roles/nameserver/tasks/config.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/roles/nameserver/tasks/config.yml b/roles/nameserver/tasks/config.yml
index bfbd2cb..9e0fe3a 100644
--- a/roles/nameserver/tasks/config.yml
+++ b/roles/nameserver/tasks/config.yml
@@ -27,6 +27,9 @@
     name: named_write_master_zones
     state: yes
     persistent: yes
+  when:
+    - ansible_selinux.status is defined
+    - ansible_selinux.status == "enabled"
 
 # Helps prevent accidental DoS
 - name: Double maximum configured connections
-- 
2.39.5