#!/bin/sh
set -u

SERVICECTL=/usr/libexec/bastionguard/bastionguard-service

/usr/bin/BastionGuard --update-sanesecurity
status=$?

if [ "$status" -eq 0 ]; then
    "$SERVICECTL" --system try-reload-or-restart clamav-daemon.service 2>/dev/null || \
    "$SERVICECTL" --system try-reload-or-restart clamd.service 2>/dev/null || true
fi

exit "$status"