diff --git a/roles/lmn_fvs/files/pam-exec.sh b/roles/lmn_fvs/files/pam-exec.sh
index 967701d..4f54861 100644
--- a/roles/lmn_fvs/files/pam-exec.sh
+++ b/roles/lmn_fvs/files/pam-exec.sh
@@ -5,6 +5,12 @@
 
 if [[ "${PAM_USER}" =~ -exam$ ]]; then
   systemctl start firewalld.service
+  if systemctl is-enabled --quiet libvirtd.service; then
+    systemctl restart libvirtd.service
+  fi
 elif ! (users | grep -q -- "-exam"); then
-   systemctl stop firewalld.service
+  systemctl stop firewalld.service
+  if systemctl is-enabled --quiet libvirtd.service; then
+    systemctl restart libvirtd.service
+  fi
 fi