---
# tasks file for ensure_selinux
- name: 'Ensure SELinux is enforcing'
  ansible.posix.selinux:
    policy: '{{ selinux_policy }}'
    state: '{{ selinux_state }}'
  register: 'results'
- name: 'Reboot if required'
  when:
    - results.reboot_required
  reboot: