Report Status Results
Date
Duration
Action Task name Task path Playbook name (or path) Tags Notes
1 08 Dec 2025 13:49:53 +0000 00:00:00.12 ansible.builtin.lineinfile ansible-hardening : V-72083 - The operating system must off-load audit records onto a different system or media from the system being audited ...tasks/rhel7stig/auditd.yml : 32 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:52 +0000 00:00:00.22 ansible.builtin.stat ansible-hardening : Verify that audisp-remote.conf exists ...tasks/rhel7stig/auditd.yml : 24 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:52 +0000 00:00:00.23 ansible.builtin.stat ansible-hardening : Verify that auditd.conf exists ...tasks/rhel7stig/auditd.yml : 16 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:52 +0000 00:00:00.11 ansible.builtin.shell ansible-hardening : Initialize AIDE (this will take a few minutes) ...tasks/rhel7stig/aide.yml : 78 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:52 +0000 00:00:00.22 ansible.builtin.stat ansible-hardening : Check to see if AIDE database is already in place ...tasks/rhel7stig/aide.yml : 70 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:51 +0000 00:00:00.12 ansible.builtin.blockinfile ansible-hardening : Configure AIDE to verify additional properties (Ubuntu) ...tasks/rhel7stig/aide.yml : 41 ...setup-hosts.yml 6
1 08 Dec 2025 13:49:51 +0000 00:00:00.11 ansible.builtin.template ansible-hardening : Exclude certain directories from AIDE ...tasks/rhel7stig/aide.yml : 27 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:51 +0000 00:00:00.39 ansible.builtin.stat ansible-hardening : Verify that AIDE configuration directory exists ...tasks/rhel7stig/aide.yml : 16 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:51 +0000 00:00:00.11 ansible.builtin.lineinfile ansible-hardening : Use pwquality when passwords are changed or created ...tasks/rhel7stig/accounts.yml : 240 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:50 +0000 00:00:00.12 ansible.builtin.debug ansible-hardening : Print warning for users with an assigned home directory that does not exist ...tasks/rhel7stig/accounts.yml : 224 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:46 +0000 00:00:04.63 ansible.builtin.stat ansible-hardening : Check each user to see if its home directory exists on the filesystem ...tasks/rhel7stig/accounts.yml : 212 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:46 +0000 00:00:00.12 ansible.builtin.debug ansible-hardening : Print warning for local interactive users without a home directory assigned ...tasks/rhel7stig/accounts.yml : 199 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:45 +0000 00:00:00.11 ansible.builtin.fail ansible-hardening : Print warnings for non-root users with UID 0 ...tasks/rhel7stig/accounts.yml : 187 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:45 +0000 00:00:00.22 shell ansible-hardening : Get all accounts with UID 0 ...tasks/rhel7stig/accounts.yml : 176 ...setup-hosts.yml 5
1 08 Dec 2025 13:49:45 +0000 00:00:00.12 ansible.builtin.debug ansible-hardening : Print warning for groups in /etc/passwd that are not in /etc/group ...tasks/rhel7stig/accounts.yml : 163 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:44 +0000 00:00:00.55 ansible.builtin.lineinfile ansible-hardening : Apply shadow-utils configurations ...tasks/rhel7stig/accounts.yml : 143 ...setup-hosts.yml 9
1 08 Dec 2025 13:49:44 +0000 00:00:00.11 ansible.builtin.lineinfile ansible-hardening : Ensure accounts are disabled if the password expires ...tasks/rhel7stig/accounts.yml : 131 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:44 +0000 00:00:00.11 ansible.builtin.lineinfile ansible-hardening : Ensure that users cannot reuse one of their last 5 passwords ...tasks/rhel7stig/accounts.yml : 117 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:44 +0000 00:00:00.13 ansible.builtin.command ansible-hardening : Set maximum password lifetime limit to 60 days for interactive accounts ...tasks/rhel7stig/accounts.yml : 103 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:44 +0000 00:00:00.12 ansible.builtin.command ansible-hardening : Set minimum password lifetime limit to 24 hours for interactive accounts ...tasks/rhel7stig/accounts.yml : 86 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:43 +0000 00:00:00.23 community.general.ini_file ansible-hardening : Ensure libuser is storing passwords using SHA512 ...tasks/rhel7stig/accounts.yml : 67 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:43 +0000 00:00:00.12 ansible.builtin.debug ansible-hardening : Print warning if PAM is not using SHA512 for password storage ...tasks/rhel7stig/accounts.yml : 55 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:43 +0000 00:00:00.23 ansible.builtin.command ansible-hardening : Check for SHA512 password storage in PAM ...tasks/rhel7stig/accounts.yml : 47 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:43 +0000 00:00:00.28 ansible.builtin.blockinfile ansible-hardening : Set password quality requirements ...tasks/rhel7stig/accounts.yml : 24 ...setup-hosts.yml 12
1 08 Dec 2025 13:49:42 +0000 00:00:00.23 ansible.builtin.stat ansible-hardening : Check if /etc/security/pwquality.conf exists ...tasks/rhel7stig/accounts.yml : 16 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:42 +0000 00:00:00.12 ansible.builtin.systemd ansible-hardening : Enable dnf automatic timer for automatic package updates ...tasks/rhel7stig/dnf.yml : 79 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:42 +0000 00:00:00.12 set_fact ansible-hardening : Set a fact for the proper dnf automatic timer ...tasks/rhel7stig/dnf.yml : 65 ...setup-hosts.yml 5
1 08 Dec 2025 13:49:42 +0000 00:00:00.12 shell ansible-hardening : Check to see which dnf automatic timers are available ...tasks/rhel7stig/dnf.yml : 49 ...setup-hosts.yml 5
1 08 Dec 2025 13:49:42 +0000 00:00:00.12 ansible.builtin.lineinfile ansible-hardening : Enable automatic package updates (dnf) ...tasks/rhel7stig/dnf.yml : 30 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:41 +0000 00:00:00.21 ansible.builtin.stat ansible-hardening : Check if /etc/dnf/automatic.conf exists ...tasks/rhel7stig/dnf.yml : 19 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:41 +0000 00:00:00.11 ansible.builtin.lineinfile ansible-hardening : V-71987 - Clean requirements/dependencies when removing packages (RedHat) ...tasks/rhel7stig/rpm.yml : 80 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:41 +0000 00:00:00.52 ansible.builtin.lineinfile ansible-hardening : V-71977 - Require digital signatures for all packages ...tasks/rhel7stig/rpm.yml : 66 ...setup-hosts.yml 6
1 08 Dec 2025 13:49:40 +0000 00:00:00.11 ansible.builtin.debug ansible-hardening : V-71855 - The cryptographic hash of system files and commands must match vendor values (rpm) ...tasks/rhel7stig/rpm.yml : 45 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:40 +0000 00:00:00.11 ansible.builtin.shell ansible-hardening : V-71855 - Get files with invalid checksums (rpm) ...tasks/rhel7stig/rpm.yml : 32 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:40 +0000 00:00:00.24 ansible.builtin.async_status ansible-hardening : Ensure RPM verification task has finished ...tasks/rhel7stig/rpm.yml : 16 ...setup-hosts.yml 4
1 08 Dec 2025 13:49:40 +0000 00:00:00.12 ansible.builtin.include_tasks ansible-hardening : Including rpm tasks ...tasks/rhel7stig/dnf.yml : 16 ...setup-hosts.yml 1
1 08 Dec 2025 13:49:40 +0000 00:00:00.16 ansible.builtin.include_tasks ansible-hardening : Including OS-specific tasks ...tasks/rhel7stig/main.yml : 77 ...setup-hosts.yml 1
1 08 Dec 2025 13:49:39 +0000 00:00:00.90 ansible.builtin.package ansible-hardening : Remove packages based on STIG requirements ...tasks/rhel7stig/packages.yml : 37 ...setup-hosts.yml 17
1 08 Dec 2025 13:49:32 +0000 00:00:06.71 ansible.builtin.package ansible-hardening : Add packages based on STIG requirements ...tasks/rhel7stig/packages.yml : 16 ...setup-hosts.yml 17
1 08 Dec 2025 13:49:32 +0000 00:00:00.11 ansible.builtin.dnf ansible-hardening : Install EPEL repository ...tasks/rhel7stig/main.yml : 57 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:31 +0000 00:00:00.23 get_users ansible-hardening : Get user data for all interactive users on the system ...tasks/rhel7stig/main.yml : 47 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:31 +0000 00:00:00.32 get_users ansible-hardening : Get user data for all users on the system ...tasks/rhel7stig/main.yml : 39 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:31 +0000 00:00:00.11 ansible.builtin.find ansible-hardening : Check for .shosts or shosts.equiv files ...tasks/rhel7stig/async_tasks.yml : 48 ...setup-hosts.yml 5
1 08 Dec 2025 13:49:31 +0000 00:00:00.11 ansible.builtin.find ansible-hardening : Locate top level directories to check for .shosts ...tasks/rhel7stig/async_tasks.yml : 34 ...setup-hosts.yml 5
1 08 Dec 2025 13:49:30 +0000 00:00:00.38 shell ansible-hardening : Verify all installed RPM packages ...tasks/rhel7stig/async_tasks.yml : 18 ...setup-hosts.yml 5
1 08 Dec 2025 13:49:30 +0000 00:00:00.12 ansible.builtin.set_fact ansible-hardening : Set a fact for the temporary directory ...tasks/rhel7stig/main.yml : 26 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:30 +0000 00:00:00.28 ansible.builtin.tempfile ansible-hardening : Create temporary directory to hold any temporary files ...tasks/rhel7stig/main.yml : 16 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:29 +0000 00:00:00.25 ansible.builtin.stat ansible-hardening : Check if grub is present on the remote node ...ansible-hardening/tasks/main.yml : 53 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:29 +0000 00:00:00.12 ansible.builtin.set_fact ansible-hardening : Set facts ...ansible-hardening/tasks/main.yml : 45 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:29 +0000 00:00:00.12 ansible.builtin.set_fact ansible-hardening : Check to see if we are booting with EFI or UEFI ...ansible-hardening/tasks/main.yml : 39 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:29 +0000 00:00:00.23 ansible.builtin.command ansible-hardening : Check for check/audit mode ...ansible-hardening/tasks/main.yml : 32 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:29 +0000 00:00:00.13 ansible.builtin.include_vars ansible-hardening : Gather variables for each operating system ...ansible-hardening/tasks/main.yml : 16 ...setup-hosts.yml 2
1 08 Dec 2025 13:49:28 +0000 00:00:00.27 ansible.builtin.include_role Include security hardening role ...osa/playbooks/security_hardening.yml : 43 ...setup-hosts.yml 1
1 08 Dec 2025 13:49:27 +0000 00:00:01.07 ansible.builtin.setup openstack.osa.gather_extra_facts : Gather additional facts ...gather_extra_facts/tasks/main.yml : 16 ...setup-hosts.yml 1
1 08 Dec 2025 13:49:27 +0000 00:00:00.12 ansible.builtin.include_role Gather additional facts ...osa/playbooks/security_hardening.yml : 27 ...setup-hosts.yml 1
13 08 Dec 2025 13:49:25 +0000 00:00:02.03 ansible.builtin.systemd openstack_hosts : Systemd daemon reload ...handlers/main.yml : 38 ...setup-hosts.yml 1
13 08 Dec 2025 13:49:23 +0000 00:00:01.89 ansible.builtin.service openstack_hosts : Restart systemd-journald ...handlers/main.yml : 28 ...setup-hosts.yml 1
13 08 Dec 2025 13:49:19 +0000 00:00:03.80 ansible.builtin.copy openstack_hosts : Define journald configuration ...tasks/openstack_hosts_systemd.yml : 57 ...setup-hosts.yml 3
13 08 Dec 2025 13:49:18 +0000 00:00:01.13 ansible.builtin.file openstack_hosts : Create /etc/systemd/journald.conf.d directory ...tasks/openstack_hosts_systemd.yml : 49 ...setup-hosts.yml 3
13 08 Dec 2025 13:49:17 +0000 00:00:00.84 ansible.builtin.include_role Run the systemd mount role ...tasks/openstack_hosts_systemd.yml : 38 ...setup-hosts.yml 3
13 08 Dec 2025 13:49:16 +0000 00:00:00.83 ansible.builtin.include_role Run the systemd-service role ...tasks/openstack_hosts_systemd.yml : 29 ...setup-hosts.yml 3
13 08 Dec 2025 13:49:15 +0000 00:00:00.83 ansible.builtin.include_role Run the systemd-networkd role ...tasks/openstack_hosts_systemd.yml : 16 ...setup-hosts.yml 3
13 08 Dec 2025 13:49:14 +0000 00:00:00.93 ansible.builtin.include_tasks openstack_hosts : Including openstack_hosts_systemd tasks ...tasks/main.yml : 178 ...setup-hosts.yml 2
13 08 Dec 2025 13:49:13 +0000 00:00:00.84 ansible.builtin.template openstack_hosts : Write git config when git is not installed ...tasks/openstack_gitconfig.yml : 42 ...setup-hosts.yml 2
13 08 Dec 2025 13:49:12 +0000 00:00:01.11 community.general.git_config openstack_hosts : Configure git safe directories ...tasks/openstack_gitconfig.yml : 32 ...setup-hosts.yml 2
13 08 Dec 2025 13:49:11 +0000 00:00:01.13 community.general.git_config openstack_hosts : Write git config when git is installed ...tasks/openstack_gitconfig.yml : 25 ...setup-hosts.yml 2
13 08 Dec 2025 13:49:10 +0000 00:00:01.12 command openstack_hosts : Get git version ...tasks/openstack_gitconfig.yml : 16 ...setup-hosts.yml 3
13 08 Dec 2025 13:49:09 +0000 00:00:00.90 ansible.builtin.include_tasks openstack_hosts : Including openstack_gitconfig tasks ...tasks/main.yml : 171 ...setup-hosts.yml 1
13 08 Dec 2025 13:49:00 +0000 00:00:08.79 ansible.builtin.command pki : Update CA store ...tasks/standalone/install_ca.yml : 31 ...setup-hosts.yml 2
13 08 Dec 2025 13:48:56 +0000 00:00:03.66 ansible.builtin.copy pki : Copy CA certificates to target host ...tasks/standalone/install_ca.yml : 24 ...setup-hosts.yml 2
1 08 Dec 2025 13:48:56 +0000 00:00:00.27 ansible.builtin.slurp pki : Slurp up CA certificates from pki setup host (localhost) ...tasks/standalone/install_ca.yml : 16 ...setup-hosts.yml 2
13 08 Dec 2025 13:48:55 +0000 00:00:00.83 ansible.builtin.include_tasks pki : Install certificate authorities ...tasks/main_ca_install.yml : 16 ...setup-hosts.yml 2
13 08 Dec 2025 13:48:54 +0000 00:00:00.97 ansible.builtin.include_role Including PKI role ...tasks/main.yml : 157 ...setup-hosts.yml 2
13 08 Dec 2025 13:48:53 +0000 00:00:00.84 ansible.posix.authorized_key openstack_hosts : Update SSH keys ...tasks/openstack_authorized_keys.yml : 24 ...setup-hosts.yml 2
13 08 Dec 2025 13:48:52 +0000 00:00:01.17 ansible.builtin.file openstack_hosts : Ensure ssh directory ...tasks/openstack_authorized_keys.yml : 16 ...setup-hosts.yml 2
13 08 Dec 2025 13:48:51 +0000 00:00:00.83 ansible.builtin.package openstack_hosts : Install user defined extra distro packages ...tasks/main.yml : 141 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:45 +0000 00:00:06.19 ansible.builtin.package openstack_hosts : Install distro packages ...tasks/main.yml : 130 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:43 +0000 00:00:02.09 ansible.posix.sysctl openstack_hosts : Decreasing tcp_retries2 sysctl ...tasks/main.yml : 120 ...setup-hosts.yml 1
1 08 Dec 2025 13:48:42 +0000 00:00:00.29 ansible.builtin.blockinfile openstack_hosts : Update hosts file on deploy host ...openstack_update_hosts_file.yml : 50 ...setup-hosts.yml 3
13 08 Dec 2025 13:48:41 +0000 00:00:01.11 ansible.builtin.blockinfile openstack_hosts : Update hosts file ...openstack_update_hosts_file.yml : 42 ...setup-hosts.yml 3
1 08 Dec 2025 13:48:41 +0000 00:00:00.11 ansible.builtin.set_fact openstack_hosts : Generate hosts file records ...openstack_update_hosts_file.yml : 16 ...setup-hosts.yml 3
13 08 Dec 2025 13:48:40 +0000 00:00:00.89 ansible.builtin.include_tasks openstack_hosts : Configure etc hosts files ...tasks/main.yml : 108 ...setup-hosts.yml 2
13 08 Dec 2025 13:48:39 +0000 00:00:00.84 ansible.builtin.lineinfile openstack_hosts : Ensure environment is applied during sudo ...tasks/main.yml : 99 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:38 +0000 00:00:00.84 ansible.builtin.include_tasks openstack_hosts : Including configure_metal_hosts tasks ...tasks/main.yml : 88 ...setup-hosts.yml 2
13 08 Dec 2025 13:48:36 +0000 00:00:01.98 ansible.builtin.file openstack_hosts : Create SSL certificate and key directory symlinks ...openstack_hosts_configure_dnf.yml : 137 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:34 +0000 00:00:02.04 ansible.builtin.file openstack_hosts : Create SSL certificate and key directories ...openstack_hosts_configure_dnf.yml : 126 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:32 +0000 00:00:01.72 ansible.builtin.command openstack_hosts : Enable CodeReady Builder repository ...openstack_hosts_configure_dnf.yml : 119 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:32 +0000 00:00:00.84 ansible.builtin.package openstack_hosts : Install centos-release-openstack package for cloudsig based installation ...openstack_hosts_configure_dnf.yml : 111 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:31 +0000 00:00:00.83 ansible.builtin.get_url openstack_hosts : Add rdo repositories via url for trunk based installation ...openstack_hosts_configure_dnf.yml : 98 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:30 +0000 00:00:00.84 ansible.builtin.blockinfile openstack_hosts : Add dnf extra conf ...openstack_hosts_configure_dnf.yml : 88 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:29 +0000 00:00:01.15 ansible.builtin.yum_repository openstack_hosts : Add dnf repositories if they do not exist ...openstack_hosts_configure_dnf.yml : 66 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:24 +0000 00:00:04.49 ansible.builtin.package openstack_hosts : Add requirement packages (repositories gpg keys packages, toolkits...) ...openstack_hosts_configure_dnf.yml : 61 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:21 +0000 00:00:02.54 ansible.builtin.rpm_key openstack_hosts : Install gpg keys ...openstack_hosts_configure_dnf.yml : 48 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:20 +0000 00:00:01.16 ansible.builtin.command openstack_hosts : Ensure GPG keys have the correct SELinux contexts applied ...openstack_hosts_configure_dnf.yml : 43 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:14 +0000 00:00:05.98 ansible.builtin.copy openstack_hosts : If a keyfile is provided, copy the gpg keyfile to the key location ...openstack_hosts_configure_dnf.yml : 36 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:11 +0000 00:00:03.01 ansible.builtin.template openstack_hosts : Disable requiretty for root sudo on RHEL ...openstack_hosts_configure_dnf.yml : 25 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:10 +0000 00:00:01.07 community.general.ini_file openstack_hosts : Configure dnf fastestmirror ...openstack_hosts_configure_dnf.yml : 16 ...setup-hosts.yml 1
13 08 Dec 2025 13:48:09 +0000 00:00:00.88 ansible.builtin.include_tasks openstack_hosts : Apply package management distro specific configuration ...tasks/main.yml : 84 ...setup-hosts.yml 1
13 08 Dec 2025 13:47:56 +0000 00:00:13.29 ansible.builtin.package openstack_hosts : Remove the blacklisted packages ...tasks/main.yml : 75 ...setup-hosts.yml 1
13 08 Dec 2025 13:47:53 +0000 00:00:02.45 openstack.config_template.config_template openstack_hosts : Add DefaultEnvironment to systemd ...tasks/main.yml : 64 ...setup-hosts.yml 1