openstack
/
openstack-ansible-security
Code Issues Proposed changes

Restart auditd after running augenrules 

The augenrules command joins together all of the audit rules from
rules.d and it is run any time the audit rules template changes. However,
the augenrules handler didn't actually restart auditd to apply the
changes to the system.

This patch fires off the auditd restart handler anytime the augenrules
handler is notified.

Closes-bug: 1590916

Change-Id: Ice83fe17ebb0e9edff9da897e435ae96c1778580
(cherry picked from commit 809b6cb52d)
This commit is contained in:
Major Hayden 2016-06-09 15:14:42 -05:00
parent 6213c87d51
commit e26c9112f9
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
handlers/main.yml
View File

@ -57,6 +57,7 @@
# Miscellaneous ##############################################################
- name: generate auditd rules
command: augenrules --load
notify: restart auditd
# This will take a while to complete the first run, so we will fork it into
# the background so it doesn't hold up the whole playbook.

5
releasenotes/notes/augenrules-restart-39fe3e1e2de3eaba.yaml Normal file
View File

@ -0,0 +1,5 @@
---
fixes:
- The role previously did not restart the audit daemon after generating a
new rules file. The `bug <https://launchpad.net/bugs/1590916>`_ has been
fixed and the audit daemon will be restarted after any audit rule changes.