diff --git a/handlers/main.yml b/handlers/main.yml index d24275a..4d6b510 100644 --- a/handlers/main.yml +++ b/handlers/main.yml @@ -11,7 +11,7 @@ - ensure_clamav is defined ansible.builtin.systemd: daemon_reload: 'yes' -- name: 'ensure_clamav.services' +- name: 'ensure_clamav.service_restart' when: - ansible_system == 'Linux' - ensure_clamav is defined @@ -25,4 +25,5 @@ loop: '{{ ensure_clamav.service_list }}' loop_control: label: '{{ item.name }} will be restarted' +... diff --git a/tasks/main.yml b/tasks/main.yml index e4f7201..1ed3559 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -45,6 +45,11 @@ loop: '{{ ensure_clamav.sysctl_list }}' loop_control: label: '{{ item.name }} will be {{ item.value }}' + notify: + - 'ensure_clamav.package_facts' + - 'ensure_clamav.service_facts' + - 'ensure_clamav.service_reload' + - 'ensure_clamav.service_restart' - name: 'ensure packages' when: - ansible_system == 'Linux' @@ -60,6 +65,8 @@ notify: - 'ensure_clamav.package_facts' - 'ensure_clamav.service_facts' + - 'ensure_clamav.service_reload' + - 'ensure_clamav.service_restart' - name: 'ensure seboolean' when: - ansible_system == 'Linux' @@ -73,6 +80,11 @@ loop: '{{ ensure_clamav.seboolean_list }}' loop_control: label: '{{ item.name }} will be {{ item.state }}' + notify: + - 'ensure_clamav.package_facts' + - 'ensure_clamav.service_facts' + - 'ensure_clamav.service_reload' + - 'ensure_clamav.service_restart' - name: 'ensure quarantine directory' when: - ansible_system == 'Linux' @@ -105,7 +117,7 @@ - 'ensure_clamav.package_facts' - 'ensure_clamav.service_facts' - 'ensure_clamav.service_reload' - - 'ensure_clamav.services' + - 'ensure_clamav.service_restart' - name: 'ensure services' when: - ansible_system == 'Linux' @@ -155,4 +167,5 @@ label: '{{ item.path }} to be removed' - name: 'flush handlers' meta: 'flush_handlers' +... diff --git a/templates/Fedora/34/etc/clamd.d/scan.conf b/templates/Fedora/34/etc/clamd.d/scan.conf index 869f6f2..ec1b9d0 100644 --- a/templates/Fedora/34/etc/clamd.d/scan.conf +++ b/templates/Fedora/34/etc/clamd.d/scan.conf @@ -684,6 +684,7 @@ User clamscan # Set the exclude paths. All subdirectories are also excluded. # Default: disabled #OnAccessExcludePath /home/user +OnAccessExcludePath /etc/selinux {% if quarantine_directory is defined %} OnAccessExcludePath {{ quarantine_directory }} {% endif %}