diff --git a/group_vars/Fedora37.yml b/group_vars/Fedora37.yml
new file mode 100644
index 0000000..0542fd7
--- /dev/null
+++ b/group_vars/Fedora37.yml
@@ -0,0 +1,4 @@
+# collectd generates a bunch of AVC denials on Fedora 37.  We'll mark
+# its domain permissive until the problems are identified and resolved
+# upstream.
+collectd_selinux_permissive: true