ceph-ansible/roles/ceph-nfs/tasks/ganesha_selinux_fix.yml

---
- name: check if selinux is enabled
  command: getenforce
  register: selinuxstatus
  changed_when: false
  failed_when: false
  check_mode: no

- name: install policycoreutils-python to get semanage
  package:
    name: policycoreutils-python
    state: present
  register: result
  until: result is succeeded
  when:
    - selinuxstatus.stdout != 'Disabled'

- name: test if ganesha_t is already permissive
  shell: |
    semanage permissive -l | grep -soq ganesha_t
  changed_when: false
  failed_when: false
  register: ganesha_t_permissive

- name: run semanage permissive -a ganesha_t
  command: semanage permissive -a ganesha_t
  changed_when: false
  failed_when: false
  when:
    - selinuxstatus.stdout != 'Disabled'
    - ganesha_t_permissive.rc != 0