Files
2026-08-19 09:51:43 +02:00

21 lines
631 B
YAML

---
- name: reload auditd rules
ansible.builtin.command: augenrules --load
changed_when: true
- name: restart auditd
ansible.builtin.systemd:
name: auditd
state: restarted
- name: restart systemd-journald
ansible.builtin.systemd:
name: systemd-journald
state: restarted
- name: regenerate grub config
ansible.builtin.command: >-
{{ cis_hardening_grub_mkconfig_cmd }}
{{ ('-o ' + (cis_hardening_grub_cfg_path_uefi if grub_bootloader_is_uefi | default(false) else cis_hardening_grub_cfg_path_bios)) if (cis_hardening_grub_cfg_path_bios | default('')) | length > 0 else '' }}
changed_when: true