add always_run: true to task. fix #64

dev-sec · May 20, 2016 · 4adc8a1 · 4adc8a1
1 parent b259a3b
commit 4adc8a1
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/tasks/main.yml b/tasks/main.yml
@@ -5,14 +5,14 @@
 - name: test to see if selinux is running
   command: getenforce
   register: sestatus
-  changed_when: false
-  ignore_errors: true
+  failed_when: false
+  always_run: true
 
 - name: check the ssh_password policy state
-  shell: semodule -l | grep "ssh_password" | awk '{print $3}' 
+  shell: semodule -l | grep "ssh_password" | awk '{print $3}'
   register: selinux_policy_state
   when: sestatus.rc == 0 and sestatus.stdout != 'Disabled'
-  changed_when: false
+  failed_when: false
 
 - name: create sshd_config and set permissions to root/600
   template: src='opensshd.conf.j2' dest='/etc/ssh/sshd_config' mode=0600 owner=root group=root validate="/usr/sbin/sshd -T -f %s"