diff --git a/templates/Fedora/34/etc/clamd.d/scan.conf b/templates/Fedora/34/etc/clamd.d/scan.conf
index 470803a..9da6fd2 100644
--- a/templates/Fedora/34/etc/clamd.d/scan.conf
+++ b/templates/Fedora/34/etc/clamd.d/scan.conf
@@ -689,6 +689,7 @@ User clamscan
 # and not perform any blocking.
 # Default: no
 #OnAccessPrevention yes
+OnAccessPrevention yes
 
 # When using prevention, if this option is turned on, any errors that occur
 # during scanning will result in the event attempt being denied. This could
@@ -715,7 +716,9 @@ User clamscan
 # Default: disabled
 #OnAccessMountPath /
 #OnAccessMountPath /home/user
-OnAccessMountPath /
+{% for item in ansible_mounts %}
+OnAccessMountPath {% item.mount %}
+{% endfor %}
 
 # With this option you can whitelist the root UID (0). Processes run under
 # root with be able to access all files without triggering scans or
@@ -757,6 +760,7 @@ OnAccessExcludeUname clamupdate
 # connection problems (or other issues).
 # Default: 0
 #OnAccessRetryAttempts 3
+OnAccessRetryAttempts 3
 
 ##
 ## Bytecode