bench_new/bench/playbooks/roles/frappe_selinux/tasks/main.yml

---
- name: Install deps
  yum:
    name:
      - policycoreutils-python
      - selinux-policy-devel
    state: present
  when: ansible_distribution == 'CentOS'

- name: Check enabled SELinux modules
  shell: semanage module -l
  register: enabled_modules
  when: ansible_distribution == 'CentOS'

- name: Copy xhiveframework_selinux policy
  copy: src=xhiveframework_selinux.te dest=/root/xhiveframework_selinux.te
  register: dest_xhiveframework_selinux_te
  when: ansible_distribution == 'CentOS'

- name: Compile xhiveframework_selinux policy
  shell: "make -f /usr/share/selinux/devel/Makefile xhiveframework_selinux.pp && semodule -i xhiveframework_selinux.pp"
  args:
    chdir: /root/
  when: "ansible_distribution == 'CentOS' and enabled_modules.stdout.find('xhiveframework_selinux') == -1 or dest_xhiveframework_selinux_te.changed"
...