patch_exim_CVE-2016-1531.yaml

---
#
# Patch exim.conf version 2.1.1 to include keep_environment=PWD
#
- hosts: directadmin
  serial: 10
  max_fail_percentage: 20
  tasks:
    - name: "patch: check exim.conf version"
      shell: "grep -c 'SpamBlocker.exim.conf.2.1.*-release' /etc/exim.conf"
      register: exim_conf_2_1_1
      changed_when: False
      failed_when: False

    - name: "patch: /etc/exim.conf"
      lineinfile: 
        dest=/etc/exim.conf 
        state=present 
        insertbefore="^(#)?\.include_if_exists\ \/etc\/exim\.clamav\.load\.conf"
        line="keep_environment=PWD"
      register: exim_patch
      when: exim_conf_2_1_1.rc == 0

    - name: "patch: restart exim"
      service:
        name=exim
        state=restarted
      when: exim_patch.changed