---
- name: check if selinux is enabled
command: getenforce
register: sestatus
changed_when: false
always_run: true