openstack
/
ansible-hardening
Code Issues Proposed changes

Add check to ClamAV task to prevent simeltaneous content updates 

Check to see if a freshclam process is already running before kicking off another; attempting a second update will fail if one is already in progress.

Change-Id: Id5ab344c2408ba64c58612bab33c2ee98aeb97d5
Closes-Bug: 1730998
This commit is contained in:
Russell Tweed 2018-03-06 21:55:27 +00:00 committed by Russell Tweed
parent d0f837a049
commit f1a52aad91
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
tasks/rhel7stig/misc.yml
View File

@ -182,10 +182,20 @@
- misc
- V-72213
- name: Check if ClamAV update process is already running
shell: "ps -ef | egrep [f]reshclam -q"
register: freshclam_proc
changed_when: False
failed_when: False
check_mode: no
tags:
- always
- name: Update ClamAV database
command: freshclam
changed_when: False
when:
- freshclam_proc.rc != 0
- clamav_install_check.stat.exists
- security_enable_virus_scanner | bool
- security_run_virus_scanner_update | bool