Add more conditionals

Author: Sebastian Gumprich

roles/ansible-ssh-hardening/tasks/main.yml

@@ -39,19 +39,19 @@
 - name: Distributing custom selinux policies
   copy: src='ssh_password' dest='{{ custom_selinux_dir }}'
   register: custom_policies_output
-  when: not ssh_use_pam and sestatus.stdout != 'Disabled'
+  when: not ssh_use_pam and sestatus.stdout != 'Disabled' and selinux_installed.rc == 0
 
 - name: check and compile policy
   shell: checkmodule -M -m -o {{ custom_selinux_dir }}/ssh_password.mod {{ custom_selinux_dir }}/ssh_password
-  when: not ssh_use_pam and sestatus.stdout != 'Disabled'
+  when: not ssh_use_pam and sestatus.stdout != 'Disabled' and selinux_installed.rc == 0
 
 - name: create selinux policy module package
   shell: semodule_package -o {{ custom_selinux_dir }}/ssh_password.pp  -m {{ custom_selinux_dir }}/ssh_password.mod
-  when: not ssh_use_pam and sestatus.stdout != 'Disabled'
+  when: not ssh_use_pam and sestatus.stdout != 'Disabled' and selinux_installed.rc == 0
 
 - name: install selinux policy
   shell: semodule -i {{ custom_selinux_dir }}/ssh_password.pp
-  when: not ssh_use_pam and sestatus.stdout != 'Disabled'
+  when: not ssh_use_pam and sestatus.stdout != 'Disabled' and selinux_installed.rc == 0
 
 - name: remove selinux-policy when Pam is used, because Allowing sshd to read the shadow file directly is considered a potential security risk (http://danwalsh.livejournal.com/12333.html)
   shell: semodule -r ssh_password