updated handlers

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

handlers/main.yml

@@ -246,18 +246,21 @@
 
 ## Auditd tasks note order for handlers to run
 
-- name: Auditd immutable check
-  ansible.builtin.command: grep -c "^-e 2" /etc/audit/rules.d/99_auditd.rules
-  changed_when: false
-  register: discovered_auditd_immutable_check
+- name: Auditd rules reload
+  when: prelim_auditd_immutable_check.rc == 1 or discovered_augenrules_check.stdout is search('No change')
+  ansible.builtin.command: augenrules --load
+  changed_when: true
+  failed_when: discovered_augenrule_check.rc not in [ 0, 1 ]
+  register: discovered_augenrule_check
 
 - name: Audit immutable fact
-  when: discovered_auditd_immutable_check.stdout == '1'
+  when: prelim_auditd_immutable_check is defined
   ansible.builtin.debug:
     msg: "Reboot required for auditd to apply new rules as immutable set"
   notify: Set reboot required
 
 - name: Stop auditd process
+  when: prelim_auditd_immutable_check is defined
   ansible.builtin.command: systemctl kill auditd
   changed_when: true
   listen: Restart auditd