diff --git a/handlers/main.yml b/handlers/main.yml index c6de8f3..45432a5 100644 --- a/handlers/main.yml +++ b/handlers/main.yml @@ -246,18 +246,21 @@ ## Auditd tasks note order for handlers to run -- name: Auditd immutable check - ansible.builtin.command: grep -c "^-e 2" /etc/audit/rules.d/99_auditd.rules - changed_when: false - register: discovered_auditd_immutable_check +- name: Auditd rules reload + when: prelim_auditd_immutable_check.rc == 1 or discovered_augenrules_check.stdout is search('No change') + ansible.builtin.command: augenrules --load + changed_when: true + failed_when: discovered_augenrule_check.rc not in [ 0, 1 ] + register: discovered_augenrule_check - name: Audit immutable fact - when: discovered_auditd_immutable_check.stdout == '1' + when: prelim_auditd_immutable_check is defined ansible.builtin.debug: msg: "Reboot required for auditd to apply new rules as immutable set" notify: Set reboot required - name: Stop auditd process + when: prelim_auditd_immutable_check is defined ansible.builtin.command: systemctl kill auditd changed_when: true listen: Restart auditd