# platform = multi_platform_fedora,multi_platform_rhel,multi_platform_sle
# reboot = false
# strategy = restrict
# complexity = low
# disruption = low

- name: Create /var/tmp/tmp-inst directory
  ansible.builtin.file:
    path: /var/tmp/tmp-inst
    state: directory
    mode: '000'
    seuser: system_u
    serole: object_r
    setype: tmp_t

{{{ ansible_lineinfile(
  msg="Make changes to /etc/security/namespace.conf",
  path="/etc/security/namespace.conf",
  regex="^\s*/var/tmp\s+/var/tmp/tmp-inst/\s+level\s+root,adm$",
  insensitive=false,
  new_line="/var/tmp /var/tmp/tmp-inst/    level      root,adm", rule_title=rule_title) }}}
