Fix service order and add SELinux support
This commit is contained in:
parent
dbc28d1230
commit
887bef0b44
@ -45,6 +45,19 @@
|
|||||||
notify:
|
notify:
|
||||||
- 'ensure_clamav.package_facts'
|
- 'ensure_clamav.package_facts'
|
||||||
- 'ensure_clamav.service_facts'
|
- 'ensure_clamav.service_facts'
|
||||||
|
- name: 'ensure seboolean'
|
||||||
|
when:
|
||||||
|
- ansible_system == 'Linux'
|
||||||
|
- ensure_clamav is defined
|
||||||
|
- ensure_clamav.seboolean_list is defined
|
||||||
|
- ensure_clamav.seboolean_list is iterable
|
||||||
|
ansible.posix.seboolean:
|
||||||
|
name: '{{ item.name }}'
|
||||||
|
presistent: '{{ item.persistent }}'
|
||||||
|
state: '{{ item.state }}'
|
||||||
|
loop: '{{ ensure_clamav.seboolean_list }}'
|
||||||
|
loop_control:
|
||||||
|
label: '{{ item.name }} will be {{ item.state }}'
|
||||||
- name: 'ensure configurations'
|
- name: 'ensure configurations'
|
||||||
when:
|
when:
|
||||||
- ansible_system == 'Linux'
|
- ansible_system == 'Linux'
|
||||||
|
@ -13,16 +13,21 @@ package_list:
|
|||||||
state: 'present'
|
state: 'present'
|
||||||
- name: 'clamd'
|
- name: 'clamd'
|
||||||
state: 'present'
|
state: 'present'
|
||||||
|
seboolean_list:
|
||||||
|
- name: 'antivirus_can_scan_system'
|
||||||
|
persistent: 'yes'
|
||||||
|
state: 'yes'
|
||||||
service_list:
|
service_list:
|
||||||
|
# NOTE: Order is important
|
||||||
|
- name: 'clamd@scan.service'
|
||||||
|
state: 'started'
|
||||||
|
enabled: 'yes'
|
||||||
- name: 'clamav-clamonacc.service'
|
- name: 'clamav-clamonacc.service'
|
||||||
state: 'started'
|
state: 'started'
|
||||||
enabled: 'yes'
|
enabled: 'yes'
|
||||||
- name: 'clamav-freshclam.service'
|
- name: 'clamav-freshclam.service'
|
||||||
state: 'started'
|
state: 'started'
|
||||||
enabled: 'yes'
|
enabled: 'yes'
|
||||||
- name: 'clamd@scan.service'
|
|
||||||
state: 'started'
|
|
||||||
enabled: 'yes'
|
|
||||||
template_list:
|
template_list:
|
||||||
- dest: '/etc/clamd.d/scan.conf'
|
- dest: '/etc/clamd.d/scan.conf'
|
||||||
group: 'root'
|
group: 'root'
|
||||||
|
Loading…
x
Reference in New Issue
Block a user