Restart auditd after running augenrules
The augenrules command joins together all of the audit rules from
rules.d and it is run any time the audit rules template changes. However,
the augenrules handler didn't actually restart auditd to apply the
changes to the system.
This patch fires off the auditd restart handler anytime the augenrules
handler is notified.
Closes-bug: 1590916
Change-Id: Ice83fe17ebb0e9edff9da897e435ae96c1778580
(cherry picked from commit 809b6cb52d
)
This commit is contained in:
parent
6213c87d51
commit
e26c9112f9
@ -57,6 +57,7 @@
|
|||||||
# Miscellaneous ##############################################################
|
# Miscellaneous ##############################################################
|
||||||
- name: generate auditd rules
|
- name: generate auditd rules
|
||||||
command: augenrules --load
|
command: augenrules --load
|
||||||
|
notify: restart auditd
|
||||||
|
|
||||||
# This will take a while to complete the first run, so we will fork it into
|
# This will take a while to complete the first run, so we will fork it into
|
||||||
# the background so it doesn't hold up the whole playbook.
|
# the background so it doesn't hold up the whole playbook.
|
||||||
|
@ -0,0 +1,5 @@
|
|||||||
|
---
|
||||||
|
fixes:
|
||||||
|
- The role previously did not restart the audit daemon after generating a
|
||||||
|
new rules file. The `bug <https://launchpad.net/bugs/1590916>`_ has been
|
||||||
|
fixed and the audit daemon will be restarted after any audit rule changes.
|
Loading…
Reference in New Issue
Block a user