Fix service order and add SELinux support
This commit is contained in:
		| @@ -45,6 +45,19 @@ | |||||||
|   notify: |   notify: | ||||||
|     - 'ensure_clamav.package_facts' |     - 'ensure_clamav.package_facts' | ||||||
|     - 'ensure_clamav.service_facts' |     - 'ensure_clamav.service_facts' | ||||||
|  | - name: 'ensure seboolean' | ||||||
|  |   when: | ||||||
|  |     - ansible_system == 'Linux' | ||||||
|  |     - ensure_clamav is defined | ||||||
|  |     - ensure_clamav.seboolean_list is defined | ||||||
|  |     - ensure_clamav.seboolean_list is iterable | ||||||
|  |   ansible.posix.seboolean: | ||||||
|  |     name: '{{ item.name }}' | ||||||
|  |     presistent: '{{ item.persistent }}' | ||||||
|  |     state: '{{ item.state }}' | ||||||
|  |   loop: '{{ ensure_clamav.seboolean_list }}' | ||||||
|  |   loop_control: | ||||||
|  |     label: '{{ item.name }} will be {{ item.state }}' | ||||||
| - name: 'ensure configurations' | - name: 'ensure configurations' | ||||||
|   when: |   when: | ||||||
|     - ansible_system == 'Linux' |     - ansible_system == 'Linux' | ||||||
|   | |||||||
| @@ -13,16 +13,21 @@ package_list: | |||||||
|     state: 'present' |     state: 'present' | ||||||
|   - name: 'clamd' |   - name: 'clamd' | ||||||
|     state: 'present' |     state: 'present' | ||||||
|  | seboolean_list: | ||||||
|  |   - name: 'antivirus_can_scan_system' | ||||||
|  |     persistent: 'yes' | ||||||
|  |     state: 'yes' | ||||||
| service_list: | service_list: | ||||||
|  | # NOTE: Order is important | ||||||
|  |   - name: 'clamd@scan.service' | ||||||
|  |     state: 'started' | ||||||
|  |     enabled: 'yes' | ||||||
|   - name: 'clamav-clamonacc.service' |   - name: 'clamav-clamonacc.service' | ||||||
|     state: 'started' |     state: 'started' | ||||||
|     enabled: 'yes' |     enabled: 'yes' | ||||||
|   - name: 'clamav-freshclam.service' |   - name: 'clamav-freshclam.service' | ||||||
|     state: 'started' |     state: 'started' | ||||||
|     enabled: 'yes' |     enabled: 'yes' | ||||||
|   - name: 'clamd@scan.service' |  | ||||||
|     state: 'started' |  | ||||||
|     enabled: 'yes' |  | ||||||
| template_list: | template_list: | ||||||
|   - dest: '/etc/clamd.d/scan.conf' |   - dest: '/etc/clamd.d/scan.conf' | ||||||
|     group: 'root' |     group: 'root' | ||||||
|   | |||||||
		Reference in New Issue
	
	Block a user