Execution
Date
08 Dec 2025 13:27:39 +0000
Duration
00:05:33.94
Controller
aio1.openstack.local
User
root
Versions
Ansible
2.18.6
ara
1.7.4 / 1.7.4
Python
3.12.3
Summary
2
Hosts
316
Tasks
313
Results
18
Plays
136
Files
0
Records
Task result details
-
Date08 Dec 2025 13:32:40 +0000
-
Module / Actionansible.builtin.command (/home/zuul/src/opendev.org/openstack/ansible-hardening/tasks/rhel7stig/lsm.yml:16)
-
Tags
- V-71989
- high
- security
| Field | Value |
|---|---|
| changed |
False |
| cmd |
[ "apparmor_status" ] |
| delta |
0:00:00.013516 |
| end |
2025-12-08 13:32:40.799078 |
| failed_when_result |
False |
| invocation |
{ "module_args": { "_raw_params": "apparmor_status", "_uses_shell": false, "argv": null, "chdir": null, "creates": null, "executable": null, "expand_argument_vars": true, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true } } |
| msg |
|
| rc |
0 |
| start |
2025-12-08 13:32:40.785562 |
| stderr |
|
| stderr_lines |
[]
|
| stdout |
apparmor module is loaded.
132 profiles are loaded.
37 profiles are in enforce mode.
/usr/lib/NetworkManager/nm-dhcp-client.action
/usr/lib/NetworkManager/nm-dhcp-helper
/usr/lib/connman/scripts/dhclient-script
/usr/sbin/chronyd
/usr/sbin/haveged
/{,usr/}sbin/dhclient
avahi-daemon
dnsmasq
dnsmasq//libvirt_leaseshelper
identd
klogd
lsb_release
mdnsd
nmbd
nscd
nvidia_modprobe
nvidia_modprobe//kmod
php-fpm
ping
plasmashell
plasmashell//QtWebEngineProcess
rsyslogd
samba-bgqd
samba-dcerpcd
samba-rpcd
samba-rpcd-classic
samba-rpcd-spoolss
smbd
smbldap-useradd
smbldap-useradd///etc/init.d/nscd
syslog-ng
syslogd
tcpdump
traceroute
unbound
unix-chkpwd
unprivileged_userns
4 profiles are in complain mode.
transmission-cli
transmission-daemon
transmission-gtk
transmission-qt
0 profiles are in prompt mode.
0 profiles are in kill mode.
91 profiles are in unconfined mode.
1password
Discord
MongoDB Compass
QtWebEngineProcess
balena-etcher
brave
buildah
busybox
cam
ch-checkns
ch-run
chrome
crun
devhelp
element-desktop
epiphany
evolution
firefox
flatpak
foliate
geary
github-desktop
goldendict
ipa_verify
kchmviewer
keybase
lc-compliance
libcamerify
linux-sandbox
loupe
lxc-attach
lxc-create
lxc-destroy
lxc-execute
lxc-stop
lxc-unshare
lxc-usernsexec
mmdebstrap
msedge
nautilus
notepadqq
obsidian
opam
opera
pageedit
podman
polypane
privacybrowser
qcam
qmapshack
qutebrowser
rootlesskit
rpm
rssguard
runc
sbuild
sbuild-abort
sbuild-adduser
sbuild-apt
sbuild-checkpackages
sbuild-clean
sbuild-createchroot
sbuild-destroychroot
sbuild-distupgrade
sbuild-hold
sbuild-shell
sbuild-unhold
sbuild-update
sbuild-upgrade
scide
signal-desktop
slack
slirp4netns
steam
stress-ng
surfshark
systemd-coredump
thunderbird
toybox
trinity
tup
tuxedo-control-center
userbindmount
uwsgi-core
vdens
virtiofsd
vivaldi-bin
vpnns
vscode
wike
wpcom
3 processes have profiles defined.
0 processes are in enforce mode.
0 processes are in complain mode.
0 processes are in prompt mode.
0 processes are in kill mode.
3 processes are unconfined but have a profile defined.
/usr/sbin/chronyd (6858)
/usr/sbin/chronyd (6859)
/usr/sbin/haveged (352)
0 processes are in mixed mode.
|
| stdout_lines |
[ "apparmor module is loaded.", "132 profiles are loaded.", "37 profiles are in enforce mode.", " /usr/lib/NetworkManager/nm-dhcp-client.action", " /usr/lib/NetworkManager/nm-dhcp-helper", " /usr/lib/connman/scripts/dhclient-script", " /usr/sbin/chronyd", " /usr/sbin/haveged", " /{,usr/}sbin/dhclient", " avahi-daemon", " dnsmasq", " dnsmasq//libvirt_leaseshelper", " identd", " klogd", " lsb_release", " mdnsd", " nmbd", " nscd", " nvidia_modprobe", " nvidia_modprobe//kmod", " php-fpm", " ping", " plasmashell", " plasmashell//QtWebEngineProcess", " rsyslogd", " samba-bgqd", " samba-dcerpcd", " samba-rpcd", " samba-rpcd-classic", " samba-rpcd-spoolss", " smbd", " smbldap-useradd", " smbldap-useradd///etc/init.d/nscd", " syslog-ng", " syslogd", " tcpdump", " traceroute", " unbound", " unix-chkpwd", " unprivileged_userns", "4 profiles are in complain mode.", " transmission-cli", " transmission-daemon", " transmission-gtk", " transmission-qt", "0 profiles are in prompt mode.", "0 profiles are in kill mode.", "91 profiles are in unconfined mode.", " 1password", " Discord", " MongoDB Compass", " QtWebEngineProcess", " balena-etcher", " brave", " buildah", " busybox", " cam", " ch-checkns", " ch-run", " chrome", " crun", " devhelp", " element-desktop", " epiphany", " evolution", " firefox", " flatpak", " foliate", " geary", " github-desktop", " goldendict", " ipa_verify", " kchmviewer", " keybase", " lc-compliance", " libcamerify", " linux-sandbox", " loupe", " lxc-attach", " lxc-create", " lxc-destroy", " lxc-execute", " lxc-stop", " lxc-unshare", " lxc-usernsexec", " mmdebstrap", " msedge", " nautilus", " notepadqq", " obsidian", " opam", " opera", " pageedit", " podman", " polypane", " privacybrowser", " qcam", " qmapshack", " qutebrowser", " rootlesskit", " rpm", " rssguard", " runc", " sbuild", " sbuild-abort", " sbuild-adduser", " sbuild-apt", " sbuild-checkpackages", " sbuild-clean", " sbuild-createchroot", " sbuild-destroychroot", " sbuild-distupgrade", " sbuild-hold", " sbuild-shell", " sbuild-unhold", " sbuild-update", " sbuild-upgrade", " scide", " signal-desktop", " slack", " slirp4netns", " steam", " stress-ng", " surfshark", " systemd-coredump", " thunderbird", " toybox", " trinity", " tup", " tuxedo-control-center", " userbindmount", " uwsgi-core", " vdens", " virtiofsd", " vivaldi-bin", " vpnns", " vscode", " wike", " wpcom", "3 processes have profiles defined.", "0 processes are in enforce mode.", "0 processes are in complain mode.", "0 processes are in prompt mode.", "0 processes are in kill mode.", "3 processes are unconfined but have a profile defined.", " /usr/sbin/chronyd (6858) ", " /usr/sbin/chronyd (6859) ", " /usr/sbin/haveged (352) ", "0 processes are in mixed mode." ] |