Handler improvements

handlers/main.yml

@@ -11,7 +11,7 @@
     - ensure_clamav is defined
   ansible.builtin.systemd:
     daemon_reload: 'yes'
-- name: 'ensure_clamav.services'
+- name: 'ensure_clamav.service_restart'
   when:
     - ansible_system == 'Linux'
     - ensure_clamav is defined
@@ -25,4 +25,5 @@
   loop: '{{ ensure_clamav.service_list }}'
   loop_control:
     label: '{{ item.name }} will be restarted'
+...
 

tasks/main.yml

@@ -45,6 +45,11 @@
   loop: '{{ ensure_clamav.sysctl_list }}'
   loop_control:
     label: '{{ item.name }} will be {{ item.value }}'
+  notify:
+    - 'ensure_clamav.package_facts'
+    - 'ensure_clamav.service_facts'
+    - 'ensure_clamav.service_reload'
+    - 'ensure_clamav.service_restart'
 - name: 'ensure packages'
   when:
     - ansible_system == 'Linux'
@@ -60,6 +65,8 @@
   notify:
     - 'ensure_clamav.package_facts'
     - 'ensure_clamav.service_facts'
+    - 'ensure_clamav.service_reload'
+    - 'ensure_clamav.service_restart'
 - name: 'ensure seboolean'
   when:
     - ansible_system == 'Linux'
@@ -73,6 +80,11 @@
   loop: '{{ ensure_clamav.seboolean_list }}'
   loop_control:
     label: '{{ item.name }} will be {{ item.state }}'
+  notify:
+    - 'ensure_clamav.package_facts'
+    - 'ensure_clamav.service_facts'
+    - 'ensure_clamav.service_reload'
+    - 'ensure_clamav.service_restart'
 - name: 'ensure quarantine directory'
   when:
     - ansible_system == 'Linux'
@@ -105,7 +117,7 @@
     - 'ensure_clamav.package_facts'
     - 'ensure_clamav.service_facts'
     - 'ensure_clamav.service_reload'
-    - 'ensure_clamav.services'
+    - 'ensure_clamav.service_restart'
 - name: 'ensure services'
   when:
     - ansible_system == 'Linux'
@@ -155,4 +167,5 @@
     label: '{{ item.path }} to be removed'
 - name: 'flush handlers'
   meta: 'flush_handlers'
+...
 

templates/Fedora/34/etc/clamd.d/scan.conf

@@ -684,6 +684,7 @@ User clamscan
 # Set the exclude paths. All subdirectories are also excluded.
 # Default: disabled
 #OnAccessExcludePath /home/user
+OnAccessExcludePath /etc/selinux
 {% if quarantine_directory is defined %}
 OnAccessExcludePath {{ quarantine_directory }}
 {% endif %}