ara | Result #2563: [ok] ansible.builtin.file on aio1 for "ansible-hardening : Private host key files must have mode 0600 or less"

Execution

Date 08 Dec 2025 13:40:18 +0000

Duration 00:10:06.79

Controller aio1.openstack.local

User root

Versions

Ansible 2.18.6

ara 1.7.4 / 1.7.4

Python 3.12.11

Summary

15 Hosts

608 Tasks

2412 Results

18 Plays

158 Files

0 Records

check:False tags:all

Date
08 Dec 2025 13:40:18 +0000
Path
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-hosts.yml

Argument	Value
version	None
verbosity	0
private_key_file	None
remote_user	None
connection	openstack.osa.ssh
timeout	None
ssh_common_args	None
sftp_extra_args	None
scp_extra_args	None
ssh_extra_args	None
ask_pass	False
connection_password_file	None
force_handlers	True
flush_cache	False
become	False
become_method	sudo
become_user	None
become_ask_pass	False
become_password_file	None
tags	['all']
skip_tags	[]
check	False
diff	False
inventory	['/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/dynamic_inventory.py', '/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/inventory.ini', '/etc/openstack_deploy/inventory.ini']
listhosts	False
subset	None
extra_vars	Not saved by ARA as configured by 'ignored_arguments'
vault_ids	[]
ask_vault_pass	False
vault_password_files	[]
forks	4
module_path	None
syntax	False
listtasks	False
listtags	False
step	False
start_at_task	None
args	['setup-hosts.yml']

Date
08 Dec 2025 13:50:23 +0000
Module / Action
ansible.builtin.file (/home/zuul/src/opendev.org/openstack/ansible-hardening/tasks/rhel7stig/sshd.yml:141)
Tags
- sshd
- medium
- V-72257
- security

Field

Value

changed

False

msg

All items completed

results

Field	Value
ansible_loop_var	item
changed	False
diff
failed	False
gid	0
group	root
invocation	{ "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": "u-xX,g-rwxs,o-rwxt", "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/etc/ssh/ssh_host_ecdsa_key", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "file", "unsafe_writes": false } }
item	/etc/ssh/ssh_host_ecdsa_key
mode	0600
owner	root
path	/etc/ssh/ssh_host_ecdsa_key
secontext	system_u:object_r:sshd_key_t:s0
size	480
state	file
uid	0

Field	Value
ansible_loop_var	item
changed	False
diff
failed	False
gid	0
group	root
invocation	{ "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": "u-xX,g-rwxs,o-rwxt", "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/etc/ssh/ssh_host_ed25519_key", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "file", "unsafe_writes": false } }
item	/etc/ssh/ssh_host_ed25519_key
mode	0600
owner	root
path	/etc/ssh/ssh_host_ed25519_key
secontext	system_u:object_r:sshd_key_t:s0
size	387
state	file
uid	0

Field	Value
ansible_loop_var	item
changed	False
diff
failed	False
gid	0
group	root
invocation	{ "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": "u-xX,g-rwxs,o-rwxt", "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/etc/ssh/ssh_host_rsa_key", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "file", "unsafe_writes": false } }
item	/etc/ssh/ssh_host_rsa_key
mode	0600
owner	root
path	/etc/ssh/ssh_host_rsa_key
secontext	system_u:object_r:sshd_key_t:s0
size	2578
state	file
uid	0