Report Status Results
Date
Duration
Action Task name Task path Playbook name (or path) Tags Notes
1 15 Dec 2025 09:54:33 +0000 00:00:00.17 ansible.builtin.lineinfile ansible-hardening : Adjust auditd/audispd configurations ...tasks/rhel7stig/auditd.yml : 146 ...setup-hosts.yml 7
1 15 Dec 2025 09:54:32 +0000 00:00:00.96 ansible.builtin.template ansible-hardening : Deploy rules for auditd based on STIG requirements ...tasks/rhel7stig/auditd.yml : 80 ...setup-hosts.yml 56
1 15 Dec 2025 09:54:31 +0000 00:00:00.42 ansible.builtin.file ansible-hardening : Remove system default audit.rules file ...tasks/rhel7stig/auditd.yml : 69 ...setup-hosts.yml 2
1 15 Dec 2025 09:54:31 +0000 00:00:00.15 ansible.builtin.set_fact ansible-hardening : Get valid system architectures for audit rules ...tasks/rhel7stig/auditd.yml : 62 ...setup-hosts.yml 2
1 15 Dec 2025 09:54:31 +0000 00:00:00.12 ansible.builtin.lineinfile ansible-hardening : V-72085 - The operating system must encrypt the transfer of audit records off-loaded onto a different system or media from the system being audited ...tasks/rhel7stig/auditd.yml : 47 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:31 +0000 00:00:00.12 ansible.builtin.lineinfile ansible-hardening : V-72083 - The operating system must off-load audit records onto a different system or media from the system being audited ...tasks/rhel7stig/auditd.yml : 32 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:30 +0000 00:00:00.39 ansible.builtin.stat ansible-hardening : Verify that audisp-remote.conf exists ...tasks/rhel7stig/auditd.yml : 24 ...setup-hosts.yml 2
1 15 Dec 2025 09:54:30 +0000 00:00:00.42 ansible.builtin.stat ansible-hardening : Verify that auditd.conf exists ...tasks/rhel7stig/auditd.yml : 16 ...setup-hosts.yml 2
1 15 Dec 2025 09:54:30 +0000 00:00:00.12 ansible.builtin.shell ansible-hardening : Initialize AIDE (this will take a few minutes) ...tasks/rhel7stig/aide.yml : 78 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:29 +0000 00:00:00.40 ansible.builtin.stat ansible-hardening : Check to see if AIDE database is already in place ...tasks/rhel7stig/aide.yml : 70 ...setup-hosts.yml 2
1 15 Dec 2025 09:54:29 +0000 00:00:00.42 ansible.builtin.blockinfile ansible-hardening : Configure AIDE to verify additional properties (Ubuntu) ...tasks/rhel7stig/aide.yml : 41 ...setup-hosts.yml 6
1 15 Dec 2025 09:54:28 +0000 00:00:00.79 ansible.builtin.template ansible-hardening : Exclude certain directories from AIDE ...tasks/rhel7stig/aide.yml : 27 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:27 +0000 00:00:00.70 ansible.builtin.stat ansible-hardening : Verify that AIDE configuration directory exists ...tasks/rhel7stig/aide.yml : 16 ...setup-hosts.yml 2
1 15 Dec 2025 09:54:27 +0000 00:00:00.15 ansible.builtin.lineinfile ansible-hardening : Use pwquality when passwords are changed or created ...tasks/rhel7stig/accounts.yml : 240 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:27 +0000 00:00:00.15 ansible.builtin.debug ansible-hardening : Print warning for users with an assigned home directory that does not exist ...tasks/rhel7stig/accounts.yml : 224 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:16 +0000 00:00:10.36 ansible.builtin.stat ansible-hardening : Check each user to see if its home directory exists on the filesystem ...tasks/rhel7stig/accounts.yml : 212 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:16 +0000 00:00:00.13 ansible.builtin.debug ansible-hardening : Print warning for local interactive users without a home directory assigned ...tasks/rhel7stig/accounts.yml : 199 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:16 +0000 00:00:00.15 ansible.builtin.fail ansible-hardening : Print warnings for non-root users with UID 0 ...tasks/rhel7stig/accounts.yml : 187 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:15 +0000 00:00:00.41 shell ansible-hardening : Get all accounts with UID 0 ...tasks/rhel7stig/accounts.yml : 176 ...setup-hosts.yml 5
1 15 Dec 2025 09:54:15 +0000 00:00:00.13 ansible.builtin.debug ansible-hardening : Print warning for groups in /etc/passwd that are not in /etc/group ...tasks/rhel7stig/accounts.yml : 163 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:14 +0000 00:00:00.77 ansible.builtin.lineinfile ansible-hardening : Apply shadow-utils configurations ...tasks/rhel7stig/accounts.yml : 143 ...setup-hosts.yml 9
1 15 Dec 2025 09:54:14 +0000 00:00:00.15 ansible.builtin.lineinfile ansible-hardening : Ensure accounts are disabled if the password expires ...tasks/rhel7stig/accounts.yml : 131 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:14 +0000 00:00:00.13 ansible.builtin.lineinfile ansible-hardening : Ensure that users cannot reuse one of their last 5 passwords ...tasks/rhel7stig/accounts.yml : 117 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:14 +0000 00:00:00.20 ansible.builtin.command ansible-hardening : Set maximum password lifetime limit to 60 days for interactive accounts ...tasks/rhel7stig/accounts.yml : 103 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:13 +0000 00:00:00.21 ansible.builtin.command ansible-hardening : Set minimum password lifetime limit to 24 hours for interactive accounts ...tasks/rhel7stig/accounts.yml : 86 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:13 +0000 00:00:00.11 community.general.ini_file ansible-hardening : Ensure libuser is storing passwords using SHA512 ...tasks/rhel7stig/accounts.yml : 67 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:13 +0000 00:00:00.13 ansible.builtin.debug ansible-hardening : Print warning if PAM is not using SHA512 for password storage ...tasks/rhel7stig/accounts.yml : 55 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:13 +0000 00:00:00.40 ansible.builtin.command ansible-hardening : Check for SHA512 password storage in PAM ...tasks/rhel7stig/accounts.yml : 47 ...setup-hosts.yml 2
1 15 Dec 2025 09:54:12 +0000 00:00:00.56 ansible.builtin.blockinfile ansible-hardening : Set password quality requirements ...tasks/rhel7stig/accounts.yml : 24 ...setup-hosts.yml 12
1 15 Dec 2025 09:54:12 +0000 00:00:00.42 ansible.builtin.stat ansible-hardening : Check if /etc/security/pwquality.conf exists ...tasks/rhel7stig/accounts.yml : 16 ...setup-hosts.yml 2
1 15 Dec 2025 09:54:11 +0000 00:00:00.13 ansible.builtin.copy ansible-hardening : Enable automatic package updates (apt) ...tasks/rhel7stig/apt.yml : 115 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:11 +0000 00:00:00.15 ansible.builtin.lineinfile ansible-hardening : V-71987 - Clean requirements/dependencies when removing packages (dpkg) ...tasks/rhel7stig/apt.yml : 99 ...setup-hosts.yml 4
1 15 Dec 2025 09:54:11 +0000 00:00:00.42 ansible.builtin.lineinfile ansible-hardening : V-71979 - Package management tool must verify authenticity of locally-installed packages ...tasks/rhel7stig/apt.yml : 87 ...setup-hosts.yml 3
1 15 Dec 2025 09:54:10 +0000 00:00:00.12 ansible.builtin.debug ansible-hardening : V-71977 - Package management tool must verify authenticity of packages ...tasks/rhel7stig/apt.yml : 77 ...setup-hosts.yml 3
1 15 Dec 2025 09:54:10 +0000 00:00:00.42 ansible.builtin.command ansible-hardening : Search for AllowUnauthenticated in /etc/apt/apt.conf.d/ ...tasks/rhel7stig/apt.yml : 70 ...setup-hosts.yml 1
1 15 Dec 2025 09:54:10 +0000 00:00:00.15 ansible.builtin.debug ansible-hardening : V-71855 - The cryptographic hash of system files and commands must match vendor values (apt) ...tasks/rhel7stig/apt.yml : 53 ...setup-hosts.yml 3
1 15 Dec 2025 09:54:09 +0000 00:00:00.15 ansible.builtin.set_fact ansible-hardening : V-71855 - Create comma-separated list ...tasks/rhel7stig/apt.yml : 42 ...setup-hosts.yml 3
1 15 Dec 2025 09:54:09 +0000 00:00:00.16 ansible.builtin.shell ansible-hardening : V-71855 - Get files with invalid checksums (apt) ...tasks/rhel7stig/apt.yml : 30 ...setup-hosts.yml 3
1 15 Dec 2025 09:54:09 +0000 00:00:00.16 ansible.builtin.shell ansible-hardening : Gather debsums report ...tasks/rhel7stig/apt.yml : 22 ...setup-hosts.yml 1
1 15 Dec 2025 09:54:09 +0000 00:00:00.15 ansible.builtin.apt ansible-hardening : Ensure debsums is installed ...tasks/rhel7stig/apt.yml : 16 ...setup-hosts.yml 1
1 15 Dec 2025 09:54:08 +0000 00:00:00.30 ansible.builtin.include_tasks ansible-hardening : Including OS-specific tasks ...tasks/rhel7stig/main.yml : 77 ...setup-hosts.yml 1
1 15 Dec 2025 09:54:07 +0000 00:00:01.12 ansible.builtin.package ansible-hardening : Remove packages based on STIG requirements ...tasks/rhel7stig/packages.yml : 37 ...setup-hosts.yml 17
1 15 Dec 2025 09:53:19 +0000 00:00:48.16 ansible.builtin.package ansible-hardening : Add packages based on STIG requirements ...tasks/rhel7stig/packages.yml : 16 ...setup-hosts.yml 17
1 15 Dec 2025 09:53:19 +0000 00:00:00.15 ansible.builtin.dnf ansible-hardening : Install EPEL repository ...tasks/rhel7stig/main.yml : 57 ...setup-hosts.yml 2
1 15 Dec 2025 09:53:18 +0000 00:00:00.40 get_users ansible-hardening : Get user data for all interactive users on the system ...tasks/rhel7stig/main.yml : 47 ...setup-hosts.yml 2
1 15 Dec 2025 09:53:18 +0000 00:00:00.57 get_users ansible-hardening : Get user data for all users on the system ...tasks/rhel7stig/main.yml : 39 ...setup-hosts.yml 2
1 15 Dec 2025 09:53:17 +0000 00:00:00.15 ansible.builtin.find ansible-hardening : Check for .shosts or shosts.equiv files ...tasks/rhel7stig/async_tasks.yml : 48 ...setup-hosts.yml 5
1 15 Dec 2025 09:53:17 +0000 00:00:00.15 ansible.builtin.find ansible-hardening : Locate top level directories to check for .shosts ...tasks/rhel7stig/async_tasks.yml : 34 ...setup-hosts.yml 5
1 15 Dec 2025 09:53:17 +0000 00:00:00.12 shell ansible-hardening : Verify all installed RPM packages ...tasks/rhel7stig/async_tasks.yml : 18 ...setup-hosts.yml 5
1 15 Dec 2025 09:53:17 +0000 00:00:00.12 ansible.builtin.set_fact ansible-hardening : Set a fact for the temporary directory ...tasks/rhel7stig/main.yml : 26 ...setup-hosts.yml 2
1 15 Dec 2025 09:53:16 +0000 00:00:00.56 ansible.builtin.tempfile ansible-hardening : Create temporary directory to hold any temporary files ...tasks/rhel7stig/main.yml : 16 ...setup-hosts.yml 2
1 15 Dec 2025 09:53:16 +0000 00:00:00.42 ansible.builtin.stat ansible-hardening : Check if grub is present on the remote node ...ansible-hardening/tasks/main.yml : 53 ...setup-hosts.yml 2
1 15 Dec 2025 09:53:15 +0000 00:00:00.14 ansible.builtin.set_fact ansible-hardening : Set facts ...ansible-hardening/tasks/main.yml : 45 ...setup-hosts.yml 2
1 15 Dec 2025 09:53:15 +0000 00:00:00.13 ansible.builtin.set_fact ansible-hardening : Check to see if we are booting with EFI or UEFI ...ansible-hardening/tasks/main.yml : 39 ...setup-hosts.yml 2
1 15 Dec 2025 09:53:15 +0000 00:00:00.40 ansible.builtin.command ansible-hardening : Check for check/audit mode ...ansible-hardening/tasks/main.yml : 32 ...setup-hosts.yml 2
1 15 Dec 2025 09:53:14 +0000 00:00:00.16 ansible.builtin.include_vars ansible-hardening : Gather variables for each operating system ...ansible-hardening/tasks/main.yml : 16 ...setup-hosts.yml 2
1 15 Dec 2025 09:53:14 +0000 00:00:00.54 ansible.builtin.include_role Include security hardening role ...osa/playbooks/security_hardening.yml : 43 ...setup-hosts.yml 1
1 15 Dec 2025 09:53:12 +0000 00:00:01.53 ansible.builtin.setup openstack.osa.gather_extra_facts : Gather additional facts ...gather_extra_facts/tasks/main.yml : 16 ...setup-hosts.yml 1
1 15 Dec 2025 09:53:12 +0000 00:00:00.16 ansible.builtin.include_role Gather additional facts ...osa/playbooks/security_hardening.yml : 27 ...setup-hosts.yml 1
16 15 Dec 2025 09:53:09 +0000 00:00:02.99 ansible.builtin.systemd openstack_hosts : Systemd daemon reload ...handlers/main.yml : 38 ...setup-hosts.yml 1
16 15 Dec 2025 09:53:06 +0000 00:00:02.62 ansible.builtin.service openstack_hosts : Restart systemd-journald ...handlers/main.yml : 28 ...setup-hosts.yml 1
16 15 Dec 2025 09:53:03 +0000 00:00:03.23 ansible.builtin.copy openstack_hosts : Define journald configuration ...tasks/openstack_hosts_systemd.yml : 57 ...setup-hosts.yml 3
16 15 Dec 2025 09:53:01 +0000 00:00:01.82 ansible.builtin.file openstack_hosts : Create /etc/systemd/journald.conf.d directory ...tasks/openstack_hosts_systemd.yml : 49 ...setup-hosts.yml 3
16 15 Dec 2025 09:53:00 +0000 00:00:01.40 ansible.builtin.include_role Run the systemd mount role ...tasks/openstack_hosts_systemd.yml : 38 ...setup-hosts.yml 3
16 15 Dec 2025 09:52:58 +0000 00:00:01.38 ansible.builtin.include_role Run the systemd-service role ...tasks/openstack_hosts_systemd.yml : 29 ...setup-hosts.yml 3
16 15 Dec 2025 09:52:57 +0000 00:00:01.36 ansible.builtin.include_role Run the systemd-networkd role ...tasks/openstack_hosts_systemd.yml : 16 ...setup-hosts.yml 3
16 15 Dec 2025 09:52:55 +0000 00:00:01.81 ansible.builtin.include_tasks openstack_hosts : Including openstack_hosts_systemd tasks ...tasks/main.yml : 178 ...setup-hosts.yml 2
16 15 Dec 2025 09:52:54 +0000 00:00:01.37 ansible.builtin.template openstack_hosts : Write git config when git is not installed ...tasks/openstack_gitconfig.yml : 42 ...setup-hosts.yml 2
16 15 Dec 2025 09:52:52 +0000 00:00:01.75 community.general.git_config openstack_hosts : Configure git safe directories ...tasks/openstack_gitconfig.yml : 32 ...setup-hosts.yml 2
16 15 Dec 2025 09:52:50 +0000 00:00:01.76 community.general.git_config openstack_hosts : Write git config when git is installed ...tasks/openstack_gitconfig.yml : 25 ...setup-hosts.yml 2
16 15 Dec 2025 09:52:48 +0000 00:00:01.81 command openstack_hosts : Get git version ...tasks/openstack_gitconfig.yml : 16 ...setup-hosts.yml 3
16 15 Dec 2025 09:52:46 +0000 00:00:01.61 ansible.builtin.include_tasks openstack_hosts : Including openstack_gitconfig tasks ...tasks/main.yml : 171 ...setup-hosts.yml 1
16 15 Dec 2025 09:52:41 +0000 00:00:05.21 ansible.builtin.command pki : Update CA store ...tasks/standalone/install_ca.yml : 31 ...setup-hosts.yml 2
16 15 Dec 2025 09:52:38 +0000 00:00:03.07 ansible.builtin.copy pki : Copy CA certificates to target host ...tasks/standalone/install_ca.yml : 24 ...setup-hosts.yml 2
1 15 Dec 2025 09:52:37 +0000 00:00:00.61 ansible.builtin.slurp pki : Slurp up CA certificates from pki setup host (localhost) ...tasks/standalone/install_ca.yml : 16 ...setup-hosts.yml 2
16 15 Dec 2025 09:52:36 +0000 00:00:01.48 ansible.builtin.include_tasks pki : Install certificate authorities ...tasks/main_ca_install.yml : 16 ...setup-hosts.yml 2
16 15 Dec 2025 09:52:34 +0000 00:00:01.78 ansible.builtin.include_role Including PKI role ...tasks/main.yml : 157 ...setup-hosts.yml 2
16 15 Dec 2025 09:52:33 +0000 00:00:01.42 ansible.posix.authorized_key openstack_hosts : Update SSH keys ...tasks/openstack_authorized_keys.yml : 24 ...setup-hosts.yml 2
16 15 Dec 2025 09:52:31 +0000 00:00:01.98 ansible.builtin.file openstack_hosts : Ensure ssh directory ...tasks/openstack_authorized_keys.yml : 16 ...setup-hosts.yml 2
16 15 Dec 2025 09:52:29 +0000 00:00:01.36 ansible.builtin.package openstack_hosts : Install user defined extra distro packages ...tasks/main.yml : 141 ...setup-hosts.yml 1
16 15 Dec 2025 09:52:20 +0000 00:00:08.84 ansible.builtin.package openstack_hosts : Install distro packages ...tasks/main.yml : 130 ...setup-hosts.yml 1
16 15 Dec 2025 09:52:17 +0000 00:00:02.96 ansible.posix.sysctl openstack_hosts : Decreasing tcp_retries2 sysctl ...tasks/main.yml : 120 ...setup-hosts.yml 1
1 15 Dec 2025 09:52:17 +0000 00:00:00.63 ansible.builtin.blockinfile openstack_hosts : Update hosts file on deploy host ...openstack_update_hosts_file.yml : 50 ...setup-hosts.yml 3
16 15 Dec 2025 09:52:15 +0000 00:00:01.76 ansible.builtin.blockinfile openstack_hosts : Update hosts file ...openstack_update_hosts_file.yml : 42 ...setup-hosts.yml 3
1 15 Dec 2025 09:52:14 +0000 00:00:00.22 ansible.builtin.set_fact openstack_hosts : Generate hosts file records ...openstack_update_hosts_file.yml : 16 ...setup-hosts.yml 3
16 15 Dec 2025 09:52:13 +0000 00:00:01.52 ansible.builtin.include_tasks openstack_hosts : Configure etc hosts files ...tasks/main.yml : 108 ...setup-hosts.yml 2
16 15 Dec 2025 09:52:11 +0000 00:00:01.37 ansible.builtin.lineinfile openstack_hosts : Ensure environment is applied during sudo ...tasks/main.yml : 99 ...setup-hosts.yml 1
16 15 Dec 2025 09:52:10 +0000 00:00:01.37 ansible.builtin.include_tasks openstack_hosts : Including configure_metal_hosts tasks ...tasks/main.yml : 88 ...setup-hosts.yml 2
16 15 Dec 2025 09:52:09 +0000 00:00:01.37 ansible.builtin.apt openstack_hosts : Update Apt cache ...openstack_hosts_configure_apt.yml : 99 ...setup-hosts.yml 1
16 15 Dec 2025 09:52:05 +0000 00:00:03.40 ansible.builtin.copy openstack_hosts : Add apt extra conf ...openstack_hosts_configure_apt.yml : 91 ...setup-hosts.yml 1
16 15 Dec 2025 09:52:03 +0000 00:00:02.20 ansible.builtin.deb822_repository openstack_hosts : Manage apt repositories ...openstack_hosts_configure_apt.yml : 56 ...setup-hosts.yml 1
16 15 Dec 2025 09:51:50 +0000 00:00:12.34 ansible.builtin.apt openstack_hosts : Add requirement packages (repositories gpg keys, toolkits...) ...openstack_hosts_configure_apt.yml : 45 ...setup-hosts.yml 1
16 15 Dec 2025 09:51:48 +0000 00:00:02.43 ansible.builtin.file openstack_hosts : Clean up legacy repository config not in deb822 format ...openstack_hosts_configure_apt.yml : 34 ...setup-hosts.yml 1
16 15 Dec 2025 09:51:47 +0000 00:00:01.37 ansible.builtin.assert openstack_hosts : Validate repo config is deb822 format ...openstack_hosts_configure_apt.yml : 26 ...setup-hosts.yml 1
16 15 Dec 2025 09:51:45 +0000 00:00:01.79 ansible.builtin.file openstack_hosts : Ensure /etc/apt/sources.list.d exists ...openstack_hosts_configure_apt.yml : 18 ...setup-hosts.yml 1
16 15 Dec 2025 09:51:43 +0000 00:00:01.67 ansible.builtin.include_tasks openstack_hosts : Apply package management distro specific configuration ...tasks/main.yml : 84 ...setup-hosts.yml 1
16 15 Dec 2025 09:51:22 +0000 00:00:21.07 ansible.builtin.package openstack_hosts : Remove the blacklisted packages ...tasks/main.yml : 75 ...setup-hosts.yml 1
16 15 Dec 2025 09:51:20 +0000 00:00:02.21 openstack.config_template.config_template openstack_hosts : Add DefaultEnvironment to systemd ...tasks/main.yml : 64 ...setup-hosts.yml 1
16 15 Dec 2025 09:51:18 +0000 00:00:01.73 ansible.builtin.file openstack_hosts : Create systemd global directory ...tasks/main.yml : 56 ...setup-hosts.yml 1
16 15 Dec 2025 09:51:16 +0000 00:00:01.84 ansible.builtin.blockinfile openstack_hosts : Add global_environment_variables to environment file ...tasks/main.yml : 46 ...setup-hosts.yml 2