From 0808401a916fa3a168bcf50cb6a27e88ce656dda Mon Sep 17 00:00:00 2001
From: Stefan Joosten <stefan@atcomputing.nl>
Date: Tue, 10 Jan 2023 11:18:24 +0100
Subject: [PATCH] Use service to restart auditd

---
 handlers/main.yml | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/handlers/main.yml b/handlers/main.yml
index 0920f67..0023ef3 100644
--- a/handlers/main.yml
+++ b/handlers/main.yml
@@ -13,10 +13,9 @@
   when:
     - ansible_connection not in [ "container", "docker", "community.docker.docker" ]
 
-- name: Restart auditd
-  ansible.builtin.service:
-    name: "{{ auditd_service }}"
-    state: restarted
-    use: service
+# systemctl can't restart auditd, service can: https://access.redhat.com/solutions/2664811
+- name: Restart auditd  # noqa: command-instead-of-module
+  ansible.builtin.command:
+    cmd: /usr/sbin/service {{ auditd_service }} restart
   when:
     - not ansible_check_mode