---

- name: Install python bindings for SELinux
  sudo: yes
  yum: name={{ item }} state=present
  with_items:
    - libselinux-python
    - libsemanage-python


- name: Check if "setenforce" is disabled
  stat: path={{ setenforce_disable_file }}
  register: setenforce_disabled


- name: Disable "setenforce"
  sudo: yes
  command: /usr/sbin/setenforce 0
  ignore_errors: true
  when: not setenforce_disabled.stat.exists


- name: Create file (disable setenforce)
  sudo: yes
  command: touch {{ setenforce_disable_file }} creates={{ setenforce_disable_file }}
  when: not setenforce_disabled.stat.exists


- name: Disable "targeted" SELinux policy
  sudo: yes
  selinux: policy=targeted state=disabled