From 97b88fa5637766b66e472e167794bed161cedbd8 Mon Sep 17 00:00:00 2001
From: Eric Paris <eparis@redhat.com>
Date: Tue, 23 Jun 2015 19:24:38 -0400
Subject: [PATCH] Set SELinux permissive to allow DNS to work

---
 contrib/ansible/roles/node/tasks/main.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/contrib/ansible/roles/node/tasks/main.yml b/contrib/ansible/roles/node/tasks/main.yml
index 2e0b7d973a8..08c815878a6 100644
--- a/contrib/ansible/roles/node/tasks/main.yml
+++ b/contrib/ansible/roles/node/tasks/main.yml
@@ -1,4 +1,13 @@
 ---
+- name: Check if selinux enforcing
+  command: getenforce
+  register: selinux
+  changed_when: false
+
+- name: Set selinux permissive because tokens and selinux don't work together
+  selinux: state=permissive policy=targeted
+  when: "'Enforcing' in selinux.stdout"
+
 - include: generic-install.yml
   when: not is_atomic and not ansible_distribution == "CentOS"