From 8f7d132e63d5e2c135bdc1f75690b8979f8c1ad2 Mon Sep 17 00:00:00 2001
From: Marc Gariepy <gariepy.marc@gmail.com>
Date: Fri, 3 Mar 2017 12:04:22 -0500
Subject: [PATCH] Fix selinux check when disabled

Change-Id: Ibd52b4c174e7b9eb6305dbcdb12c7d675b6fcf94
---
 tasks/rhel7stig/lsm.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tasks/rhel7stig/lsm.yml b/tasks/rhel7stig/lsm.yml
index bd558a4d..d356a6d4 100644
--- a/tasks/rhel7stig/lsm.yml
+++ b/tasks/rhel7stig/lsm.yml
@@ -66,6 +66,7 @@
   check_mode: no
   when:
     - ansible_os_family == 'RedHat'
+    - ansible_selinux.status is defined
     - ansible_selinux.status != 'disabled'
   tags:
     - lsm