Fix service order and add SELinux support

This commit is contained in:
Jason Rothstein 2021-07-06 03:26:42 +00:00
parent dbc28d1230
commit 887bef0b44
2 changed files with 21 additions and 3 deletions

View File

@ -45,6 +45,19 @@
notify: notify:
- 'ensure_clamav.package_facts' - 'ensure_clamav.package_facts'
- 'ensure_clamav.service_facts' - 'ensure_clamav.service_facts'
- name: 'ensure seboolean'
when:
- ansible_system == 'Linux'
- ensure_clamav is defined
- ensure_clamav.seboolean_list is defined
- ensure_clamav.seboolean_list is iterable
ansible.posix.seboolean:
name: '{{ item.name }}'
presistent: '{{ item.persistent }}'
state: '{{ item.state }}'
loop: '{{ ensure_clamav.seboolean_list }}'
loop_control:
label: '{{ item.name }} will be {{ item.state }}'
- name: 'ensure configurations' - name: 'ensure configurations'
when: when:
- ansible_system == 'Linux' - ansible_system == 'Linux'

View File

@ -13,16 +13,21 @@ package_list:
state: 'present' state: 'present'
- name: 'clamd' - name: 'clamd'
state: 'present' state: 'present'
seboolean_list:
- name: 'antivirus_can_scan_system'
persistent: 'yes'
state: 'yes'
service_list: service_list:
# NOTE: Order is important
- name: 'clamd@scan.service'
state: 'started'
enabled: 'yes'
- name: 'clamav-clamonacc.service' - name: 'clamav-clamonacc.service'
state: 'started' state: 'started'
enabled: 'yes' enabled: 'yes'
- name: 'clamav-freshclam.service' - name: 'clamav-freshclam.service'
state: 'started' state: 'started'
enabled: 'yes' enabled: 'yes'
- name: 'clamd@scan.service'
state: 'started'
enabled: 'yes'
template_list: template_list:
- dest: '/etc/clamd.d/scan.conf' - dest: '/etc/clamd.d/scan.conf'
group: 'root' group: 'root'