Test to see if selinux is enabled.

gistfile1.txt

---

- hosts: all

  tasks:

  # this task runs 'getenforce' and registers the result into the "sestatus" variable
  # changed_when: false tells ansible never to mark this task as "changed"
  - name: test to see if selinux is running
    command: getenforce
    register: sestatus
    changed_when: false

  # this task tests to see if the output
  - name: print a message if selinux is enabled
    debug: msg="selinux is enabled"
    when: '"Enabled" in sestatus.stdout'

On my home machine, getenforce output is "Enforcing"

[ray@f19 ~]$ getenforce
Enforcing
[ray@f19 ~]$ echo $?
0