add SELinux role

README.md

@@ -0,0 +1,8 @@
+Configure SELinux
+
+Default values:
+
+    selinux_policy: 'targeted'
+    selinux_state: 'permissive'
+    reboot_requirement: false
+

defaults/main.yml

@@ -0,0 +1,4 @@
+---
+selinux_policy: 'targeted'
+selinux_state: 'permissive'
+reboot_requirement: false

handlers/main.yml

@@ -0,0 +1,5 @@
+---
+
+- name: Reboot
+  reboot:
+  when: reboot_requirement

tasks/main.yml

@@ -0,0 +1,18 @@
+---
+- name: Install libselinux-python
+  package: name=libselinux-python state=present
+  when:
+    - ansible_os_family == 'RedHat'
+    - ansible_distribution_major_version <= '7'
+
+- name: Install python3-libselinux
+  package: name=python3-libselinux state=present
+  when:
+    - ansible_os_family == 'RedHat'
+    - ansible_distribution_major_version == '8'
+
+- name: 'Set selinux state'
+  selinux:
+    policy: "{{ selinux_policy }}"
+    state: "{{ selinux_state }}"
+  notify: Reboot