Execution
Date 14 Dec 2025 10:04:43 +0000
Duration 00:10:10.66
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.13.5
Summary
15 Hosts
603 Tasks
2357 Results
18 Plays
157 Files
0 Records

Task result details

  • Status
    CHANGED
  • Duration
    00:00:00.16
  • Play
    Apply security hardening configurations
  • Task
    ansible-hardening : Adjust ssh server configuration based on STIG requirements
  • Host
    aio1

Field Value
changed
True
diff

invocation
{
    "module_args": {
        "append_newline": false,
        "attributes": null,
        "backup": false,
        "block": "# V-71939 / RHEL-07-010440\nPermitEmptyPasswords no\n# V-71957\nPermitUserEnvironment no\n# V-71959\nHostbasedAuthentication no\n# V-72221\nCiphers aes128-ctr,aes192-ctr,aes256-ctr\n# V-72237\nClientAliveInterval 600\n# V-72241\nClientAliveCountMax 0\n# V-72245\nPrintLastLog yes\n# V-72247\nPermitRootLogin without-password\n# V-72249 / V-72239\nIgnoreUserKnownHosts yes\n# V-72243\nIgnoreRhosts yes\n# V-72303\nX11Forwarding yes\n# V-72251\nProtocol 2\n# V-72253\nMACs hmac-sha2-256,hmac-sha2-512\n# V-72267\nCompression delayed\n# V-72261\nKerberosAuthentication no\n# V-204598\nGSSAPIAuthentication no\n# V-72263\nStrictModes yes\n# V-71861\nPrintMotd yes\n",
        "create": false,
        "dest": "/etc/ssh/sshd_config",
        "group": null,
        "insertafter": null,
        "insertbefore": "BOF",
        "marker": "# {mark} MANAGED BY ANSIBLE-HARDENING",
        "marker_begin": "BEGIN",
        "marker_end": "END",
        "mode": null,
        "owner": null,
        "path": "/etc/ssh/sshd_config",
        "prepend_newline": false,
        "selevel": null,
        "serole": null,
        "setype": null,
        "seuser": null,
        "state": "present",
        "unsafe_writes": false,
        "validate": "/usr/sbin/sshd -T -f %s"
    }
}
msg
Block inserted