diff --git a/playbooks/zm.yml b/playbooks/zm.yml
index 12c108a..810d34e 100644
--- a/playbooks/zm.yml
+++ b/playbooks/zm.yml
@@ -32,6 +32,12 @@
     - name: run handlers to get interfaces configured
       meta: flush_handlers
 
+    # TODO: this should really be fixed
+    - name: put selinux in permissive state
+      selinux:
+        policy: targeted
+        state: permissive
+
     - name: copy dns zone files
       copy:
         dest: "/var/lib/unbound/{{ item }}"