1 files changed, 32 insertions, 0 deletions
diff --git a/roles/selinux/README.md b/roles/selinux/README.md
new file mode 100644
index 0000000..97c0489
--- /dev/null
+++ b/roles/selinux/README.md
@@ -0,0 +1,32 @@
+SELinux
+=======
+
+Description
+-----------
+
+The `selinux` role sets the SELinux enforcement policy, enables `auditd`, and
+reboots the host (if necessary).
+
+Variables
+---------
+
+This role **accepts** the following variables:
+
+Variable          | Default | Description
+------------------|---------|------------
+`selinux_enabled` | yes     | `enforcing` if true, `disabled` if false
+
+
+Usage
+-----
+
+Example playbook:
+
+````yaml
+- name: set selinux policy
+  hosts: all
+  roles:
+    - role: selinux
+      vars:
+        selinux_enabled: yes
+````