Merge pull request dev-sec#69 from dev-sec/always_run_task

add always_run: true to task. fix dev-sec#64
divialth · Jun 13, 2016 · 6b40cfe · 6b40cfe
2 parents b2f5969 + 6c42c7f
commit 6b40cfe
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/tasks/main.yml b/tasks/main.yml
@@ -6,12 +6,14 @@
   command: getenforce
   register: sestatus
   failed_when: false
-  ignore_errors: true
+  changed_when: false
+  always_run: true
 
 - name: check the ssh_password policy state
-  shell: semodule -l | grep "ssh_password" | awk '{print $3}' 
+  shell: semodule -l | grep "ssh_password" | awk '{print $3}'
   register: selinux_policy_state
   when: sestatus.rc == 0 and sestatus.stdout != 'Disabled'
+  failed_when: false
   changed_when: false
 
 - name: create sshd_config and set permissions to root/600