diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index 737dd3c..89446ec 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -8,5 +8,16 @@
 
 - name: ensure selinux python bindings are installed
   package:
-    name={{ selinux_python_libs|join(',') }}
-    state=present
+    name: '{{ selinux_python_libs }}'
+    state: present
+  tags:
+  - install
+
+- name: ensure root password is set
+  user:
+    name: root
+    password: '{{ root_password_hash }}'
+  when: root_password_hash is defined
+  tags:
+  - root-user
+  - user