--- # defaults file for ensure_selinux selinux_policy: 'targeted' selinux_state: 'enforcing'