defined selinux_ports cause error when selinux_state=disabled

[goshansp]

Setting selinux_ports will cause the module to fail if selinux_state=disabled. We require to set selinux_ports globally.

Workaround: Setting selinux_ports=[] for all hosts that selinux_state=disabled and hence bloating the inventory.

Is there a way to avoid this without PR?

[bachradsusi]

"seport" module has "ignore_selinux_state" option:

- ignore_selinux_state
        Run independent of selinux runtime state
        default: false
        type: bool

Using the following change it's possible to set SELinux port mapping on a system with SELinux disabled but with installed "selinux-policy-targeted"

diff --git a/tasks/main.yml b/tasks/main.yml
index f78f8a18ab1e..6da1a674d7e1 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -102,6 +102,7 @@
     setype: "{{ item.setype }}"
     state: "{{ item.state | default('present') }}"
     local: "{{ item.local | default(False) }}"
+    ignore_selinux_state: "{{ selinux_state != 'disabled' }}"
   with_items: "{{ selinux_ports }}"
 
 - name: Set linux user to SELinux user mapping

[bachradsusi]

ignore_selinux_state: "{{ selinux_state != 'disabled' }}"

this is wrong, correct would be ignore_selinux_state: "{{ ansible_selinux.status == 'disabled' }}"

I'll prepare a patch which will add same option to other modules.