---
- name: reload auditd rules
  ansible.builtin.command: augenrules --load
  changed_when: true

- name: restart auditd
  ansible.builtin.systemd:
    name: auditd
    state: restarted

- name: restart systemd-journald
  ansible.builtin.systemd:
    name: systemd-journald
    state: restarted

- name: regenerate grub config
  ansible.builtin.command: >-
    {{ cis_hardening_grub_mkconfig_cmd }}
    {{ ('-o ' + (cis_hardening_grub_cfg_path_uefi if grub_bootloader_is_uefi | default(false) else cis_hardening_grub_cfg_path_bios)) if (cis_hardening_grub_cfg_path_bios | default('')) | length > 0 else '' }}
  changed_when: true