On 09. des. 2016 05:55, matzuba wrote:
When i look at the unit definition for auditd, i can see
refuseManualStop=yes. Is this why i cant restart the service? how does one
over come this to pickup the new audit rules?
Is this more of a Centos/RHEL issue?
sudo systemctl restart auditd.service
In my playbook, i have a task to update audit.rules and then notify a
handler which should restart the auditd service.
task:
- name: 6.6.7 - audit rules configuration
template: src=X/ansible/templates/auditd_rules.j2
dest=/etc/audit/rules.d/audit.rules