---
- name: set selinux permissions
  shell: |
    chcon -Rt svirt_sandbox_file_t {{ item }}
  with_items:
    - "{{ ceph_conf_key_directory }}"
    - /var/lib/ceph
  changed_when: false
  when:
    - ansible_os_family == 'RedHat'
    - sestatus.stdout != 'Disabled'