---
- name: "Copy radius type enforcement file"
  copy:
    src: "radius_allow_rule.te"
    dest: "/tmp/radius_allow_rule.te"

- name: "Compile radius module file"
  command: checkmodule -M -m -o /tmp/radius_allow_rule.mod /tmp/radius_allow_rule.te

- name: "Build radius policy package"
  command: semodule_package -o /tmp/radius_allow_rule.pp -m /tmp/radius_allow_rule.mod

- name: "Load radius policy package"
  command: semodule -i /tmp/radius_allow_rule.pp

- name: "Remove temporary files"
  file:
    path: /tmp/radius_allow_rule.*
    state: absent

- name: "Allow radius connect to 22007 port"
  shell: "semanage port -a -t radius_port_t -p tcp 22007"