initial commit

roles/cis_hardening/handlers/main.yml

@@ -0,0 +1,20 @@
+---
+- name: reload auditd rules
+  ansible.builtin.command: augenrules --load
+  changed_when: true
+
+- name: restart auditd
+  ansible.builtin.systemd:
+    name: auditd
+    state: restarted
+
+- name: restart systemd-journald
+  ansible.builtin.systemd:
+    name: systemd-journald
+    state: restarted
+
+- name: regenerate grub config
+  ansible.builtin.command: >-
+    {{ cis_hardening_grub_mkconfig_cmd }}
+    {{ ('-o ' + (cis_hardening_grub_cfg_path_uefi if grub_bootloader_is_uefi | default(false) else cis_hardening_grub_cfg_path_bios)) if (cis_hardening_grub_cfg_path_bios | default('')) | length > 0 else '' }}
+  changed_when: true