{"id":411,"status":"ok","playbook":{"id":2,"items":{"plays":18,"tasks":316,"results":313,"hosts":2,"files":136,"records":0},"arguments":{"version":null,"verbosity":0,"private_key_file":null,"remote_user":null,"connection":"openstack.osa.ssh","timeout":null,"ssh_common_args":null,"sftp_extra_args":null,"scp_extra_args":null,"ssh_extra_args":null,"ask_pass":false,"connection_password_file":null,"force_handlers":true,"flush_cache":false,"become":false,"become_method":"sudo","become_user":null,"become_ask_pass":false,"become_password_file":null,"tags":["all"],"skip_tags":[],"check":false,"diff":false,"inventory":["/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/dynamic_inventory.py","/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/inventory.ini","/etc/openstack_deploy/inventory.ini"],"listhosts":false,"subset":null,"extra_vars":"Not saved by ARA as configured by 'ignored_arguments'","vault_ids":[],"ask_vault_pass":false,"vault_password_files":[],"forks":8,"module_path":null,"syntax":false,"listtasks":false,"listtags":false,"step":false,"start_at_task":null,"args":["setup-hosts.yml"]},"labels":[{"id":1,"name":"check:False"},{"id":2,"name":"tags:all"}],"started":"2025-12-08T13:27:39.675908Z","ended":"2025-12-08T13:33:13.621332Z","duration":"00:05:33.945424","name":null,"ansible_version":"2.18.6","client_version":"1.7.4","python_version":"3.12.3","server_version":"1.7.4","status":"completed","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-hosts.yml","controller":"aio1.openstack.local","user":"root"},"play":{"id":18,"items":{"tasks":160,"results":160},"started":"2025-12-08T13:30:57.399293Z","ended":"2025-12-08T13:33:13.086946Z","duration":"00:02:15.687653","name":"Apply security hardening configurations","status":"completed"},"task":{"id":414,"items":{"results":1},"path":"/home/zuul/src/opendev.org/openstack/ansible-hardening/tasks/rhel7stig/lsm.yml","tags":["V-71989","high","security"],"started":"2025-12-08T13:32:40.404543Z","ended":"2025-12-08T13:32:40.879297Z","duration":"00:00:00.474754","name":"ansible-hardening : Check apparmor_status output","uuid":"bc764e20-1f9d-934d-0f3d-000000000d3b","action":"ansible.builtin.command","lineno":16,"handler":false,"status":"completed","warnings":[],"deprecations":[],"exceptions":[],"file":152},"host":{"id":3,"name":"aio1","changed":60,"failed":0,"ok":161,"skipped":106,"unreachable":0},"delegated_to":[],"content":{"changed":false,"cmd":["apparmor_status"],"delta":"0:00:00.013516","end":"2025-12-08 13:32:40.799078","failed_when_result":false,"invocation":{"module_args":{"_raw_params":"apparmor_status","_uses_shell":false,"argv":null,"chdir":null,"creates":null,"executable":null,"expand_argument_vars":true,"removes":null,"stdin":null,"stdin_add_newline":true,"strip_empty_ends":true}},"msg":"","rc":0,"start":"2025-12-08 13:32:40.785562","stderr":"","stderr_lines":[],"stdout":"apparmor module is loaded.\n132 profiles are loaded.\n37 profiles are in enforce mode.\n   /usr/lib/NetworkManager/nm-dhcp-client.action\n   /usr/lib/NetworkManager/nm-dhcp-helper\n   /usr/lib/connman/scripts/dhclient-script\n   /usr/sbin/chronyd\n   /usr/sbin/haveged\n   /{,usr/}sbin/dhclient\n   avahi-daemon\n   dnsmasq\n   dnsmasq//libvirt_leaseshelper\n   identd\n   klogd\n   lsb_release\n   mdnsd\n   nmbd\n   nscd\n   nvidia_modprobe\n   nvidia_modprobe//kmod\n   php-fpm\n   ping\n   plasmashell\n   plasmashell//QtWebEngineProcess\n   rsyslogd\n   samba-bgqd\n   samba-dcerpcd\n   samba-rpcd\n   samba-rpcd-classic\n   samba-rpcd-spoolss\n   smbd\n   smbldap-useradd\n   smbldap-useradd///etc/init.d/nscd\n   syslog-ng\n   syslogd\n   tcpdump\n   traceroute\n   unbound\n   unix-chkpwd\n   unprivileged_userns\n4 profiles are in complain mode.\n   transmission-cli\n   transmission-daemon\n   transmission-gtk\n   transmission-qt\n0 profiles are in prompt mode.\n0 profiles are in kill mode.\n91 profiles are in unconfined mode.\n   1password\n   Discord\n   MongoDB Compass\n   QtWebEngineProcess\n   balena-etcher\n   brave\n   buildah\n   busybox\n   cam\n   ch-checkns\n   ch-run\n   chrome\n   crun\n   devhelp\n   element-desktop\n   epiphany\n   evolution\n   firefox\n   flatpak\n   foliate\n   geary\n   github-desktop\n   goldendict\n   ipa_verify\n   kchmviewer\n   keybase\n   lc-compliance\n   libcamerify\n   linux-sandbox\n   loupe\n   lxc-attach\n   lxc-create\n   lxc-destroy\n   lxc-execute\n   lxc-stop\n   lxc-unshare\n   lxc-usernsexec\n   mmdebstrap\n   msedge\n   nautilus\n   notepadqq\n   obsidian\n   opam\n   opera\n   pageedit\n   podman\n   polypane\n   privacybrowser\n   qcam\n   qmapshack\n   qutebrowser\n   rootlesskit\n   rpm\n   rssguard\n   runc\n   sbuild\n   sbuild-abort\n   sbuild-adduser\n   sbuild-apt\n   sbuild-checkpackages\n   sbuild-clean\n   sbuild-createchroot\n   sbuild-destroychroot\n   sbuild-distupgrade\n   sbuild-hold\n   sbuild-shell\n   sbuild-unhold\n   sbuild-update\n   sbuild-upgrade\n   scide\n   signal-desktop\n   slack\n   slirp4netns\n   steam\n   stress-ng\n   surfshark\n   systemd-coredump\n   thunderbird\n   toybox\n   trinity\n   tup\n   tuxedo-control-center\n   userbindmount\n   uwsgi-core\n   vdens\n   virtiofsd\n   vivaldi-bin\n   vpnns\n   vscode\n   wike\n   wpcom\n3 processes have profiles defined.\n0 processes are in enforce mode.\n0 processes are in complain mode.\n0 processes are in prompt mode.\n0 processes are in kill mode.\n3 processes are unconfined but have a profile defined.\n   /usr/sbin/chronyd (6858) \n   /usr/sbin/chronyd (6859) \n   /usr/sbin/haveged (352) \n0 processes are in mixed mode.","stdout_lines":["apparmor module is loaded.","132 profiles are loaded.","37 profiles are in enforce mode.","   /usr/lib/NetworkManager/nm-dhcp-client.action","   /usr/lib/NetworkManager/nm-dhcp-helper","   /usr/lib/connman/scripts/dhclient-script","   /usr/sbin/chronyd","   /usr/sbin/haveged","   /{,usr/}sbin/dhclient","   avahi-daemon","   dnsmasq","   dnsmasq//libvirt_leaseshelper","   identd","   klogd","   lsb_release","   mdnsd","   nmbd","   nscd","   nvidia_modprobe","   nvidia_modprobe//kmod","   php-fpm","   ping","   plasmashell","   plasmashell//QtWebEngineProcess","   rsyslogd","   samba-bgqd","   samba-dcerpcd","   samba-rpcd","   samba-rpcd-classic","   samba-rpcd-spoolss","   smbd","   smbldap-useradd","   smbldap-useradd///etc/init.d/nscd","   syslog-ng","   syslogd","   tcpdump","   traceroute","   unbound","   unix-chkpwd","   unprivileged_userns","4 profiles are in complain mode.","   transmission-cli","   transmission-daemon","   transmission-gtk","   transmission-qt","0 profiles are in prompt mode.","0 profiles are in kill mode.","91 profiles are in unconfined mode.","   1password","   Discord","   MongoDB Compass","   QtWebEngineProcess","   balena-etcher","   brave","   buildah","   busybox","   cam","   ch-checkns","   ch-run","   chrome","   crun","   devhelp","   element-desktop","   epiphany","   evolution","   firefox","   flatpak","   foliate","   geary","   github-desktop","   goldendict","   ipa_verify","   kchmviewer","   keybase","   lc-compliance","   libcamerify","   linux-sandbox","   loupe","   lxc-attach","   lxc-create","   lxc-destroy","   lxc-execute","   lxc-stop","   lxc-unshare","   lxc-usernsexec","   mmdebstrap","   msedge","   nautilus","   notepadqq","   obsidian","   opam","   opera","   pageedit","   podman","   polypane","   privacybrowser","   qcam","   qmapshack","   qutebrowser","   rootlesskit","   rpm","   rssguard","   runc","   sbuild","   sbuild-abort","   sbuild-adduser","   sbuild-apt","   sbuild-checkpackages","   sbuild-clean","   sbuild-createchroot","   sbuild-destroychroot","   sbuild-distupgrade","   sbuild-hold","   sbuild-shell","   sbuild-unhold","   sbuild-update","   sbuild-upgrade","   scide","   signal-desktop","   slack","   slirp4netns","   steam","   stress-ng","   surfshark","   systemd-coredump","   thunderbird","   toybox","   trinity","   tup","   tuxedo-control-center","   userbindmount","   uwsgi-core","   vdens","   virtiofsd","   vivaldi-bin","   vpnns","   vscode","   wike","   wpcom","3 processes have profiles defined.","0 processes are in enforce mode.","0 processes are in complain mode.","0 processes are in prompt mode.","0 processes are in kill mode.","3 processes are unconfined but have a profile defined.","   /usr/sbin/chronyd (6858) ","   /usr/sbin/chronyd (6859) ","   /usr/sbin/haveged (352) ","0 processes are in mixed mode."]},"created":"2025-12-08T13:32:40.850961Z","updated":"2025-12-08T13:32:40.851010Z","started":"2025-12-08T13:32:40.460399Z","ended":"2025-12-08T13:32:40.836432Z","duration":"00:00:00.376033","changed":false,"ignore_errors":false}