restart auditd fails when -e 2 is set

[divansantana]

In the case of auditing system be locked, with -e 2 flag, then the handler fails to execute and the playbook is marked as failed.

I think setting ignore_errors: True would be better.

[dsglaser]

ignoring errors in Ansible is generally frowned upon. What are you referring to in that the 'auditing system be locked'?

Thanks,
Dave

[divansantana]

It seems the auditing system is locked with the -e 2. So doing a restart auditd fails AFAIK, because it requires a system restart to load the new changes.