|
|
|
1 |
08 Dec 2025 13:32:56 +0000 |
00:00:00.16 |
ansible.builtin.command
|
ansible-hardening : Check TFTP configuration mode
|
...tasks/rhel7stig/misc.yml
:
402
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:56 +0000 |
00:00:00.43 |
ansible.builtin.stat
|
ansible-hardening : Check for TFTP server configuration file
|
...tasks/rhel7stig/misc.yml
:
394
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:56 +0000 |
00:00:00.16 |
ansible.builtin.lineinfile
|
ansible-hardening : V-72297 - Prevent unrestricted mail relaying
|
...tasks/rhel7stig/misc.yml
:
381
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:55 +0000 |
00:00:00.41 |
ansible.builtin.stat
|
ansible-hardening : Check for postfix configuration file
|
...tasks/rhel7stig/misc.yml
:
374
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:55 +0000 |
00:00:00.15 |
ansible.builtin.debug
|
ansible-hardening : V-72295 - Network interfaces must not be in promiscuous mode.
|
...tasks/rhel7stig/misc.yml
:
362
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:55 +0000 |
00:00:00.42 |
ansible.builtin.shell
|
ansible-hardening : Check for interfaces in promiscuous mode
|
...tasks/rhel7stig/misc.yml
:
353
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:54 +0000 |
00:00:00.15 |
ansible.builtin.debug
|
ansible-hardening : V-72281 - For systems using DNS resolution, at least two name servers must be configured.
|
...tasks/rhel7stig/misc.yml
:
340
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:53 +0000 |
00:00:01.44 |
command
|
ansible-hardening : Count nameserver entries in /etc/resolv.conf
|
...tasks/rhel7stig/misc.yml
:
330
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:53 +0000 |
00:00:00.16 |
ansible.builtin.command
|
ansible-hardening : Limit new TCP connections to 25/minute and allow bursting to 100
|
...tasks/rhel7stig/misc.yml
:
314
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:52 +0000 |
00:00:00.16 |
ansible.builtin.service
|
ansible-hardening : Ensure firewalld is running and enabled
|
...tasks/rhel7stig/misc.yml
:
301
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:52 +0000 |
00:00:00.45 |
ansible.builtin.command
|
ansible-hardening : Check firewalld status
|
...tasks/rhel7stig/misc.yml
:
292
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:52 +0000 |
00:00:00.15 |
ansible.builtin.template
|
ansible-hardening : V-72269 - Synchronize system clock (configuration file)
|
...tasks/rhel7stig/misc.yml
:
276
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:51 +0000 |
00:00:00.44 |
ansible.builtin.stat
|
ansible-hardening : Check if chrony configuration file exists
|
...tasks/rhel7stig/misc.yml
:
269
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:51 +0000 |
00:00:00.16 |
ansible.builtin.service
|
ansible-hardening : Start and enable chrony
|
...tasks/rhel7stig/misc.yml
:
256
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:51 +0000 |
00:00:00.42 |
ansible.builtin.blockinfile
|
ansible-hardening : V-72223 - Set 10 minute timeout on communication sessions
|
...tasks/rhel7stig/misc.yml
:
240
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:50 +0000 |
00:00:00.15 |
ansible.builtin.service
|
ansible-hardening : Ensure ClamAV is running
|
...tasks/rhel7stig/misc.yml
:
228
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:50 +0000 |
00:00:00.15 |
ansible.builtin.command
|
ansible-hardening : Update ClamAV database
|
...tasks/rhel7stig/misc.yml
:
214
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:50 +0000 |
00:00:00.43 |
ansible.builtin.shell
|
ansible-hardening : Check if ClamAV update process is already running
|
...tasks/rhel7stig/misc.yml
:
205
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:49 +0000 |
00:00:00.16 |
ansible.builtin.lineinfile
|
ansible-hardening : Allow automatic freshclam updates
|
...tasks/rhel7stig/misc.yml
:
190
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:49 +0000 |
00:00:00.15 |
ansible.builtin.file
|
ansible-hardening : Ensure ClamAV socket directory exists
|
...tasks/rhel7stig/misc.yml
:
174
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:49 +0000 |
00:00:00.15 |
ansible.builtin.lineinfile
|
ansible-hardening : Set ClamAV server type as socket
|
...tasks/rhel7stig/misc.yml
:
158
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:49 +0000 |
00:00:00.13 |
ansible.builtin.lineinfile
|
ansible-hardening : Remove 'Example' line from ClamAV configuration files
|
...tasks/rhel7stig/misc.yml
:
140
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:48 +0000 |
00:00:00.43 |
ansible.builtin.stat
|
ansible-hardening : Check if ClamAV is installed
|
...tasks/rhel7stig/misc.yml
:
132
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:48 +0000 |
00:00:00.14 |
ansible.builtin.debug
|
ansible-hardening : V-72209 - The system must send rsyslog output to a log aggregation server.
|
...tasks/rhel7stig/misc.yml
:
121
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:48 +0000 |
00:00:00.43 |
ansible.builtin.command
|
ansible-hardening : Check if syslog output is being sent to another server
|
...tasks/rhel7stig/misc.yml
:
112
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:47 +0000 |
00:00:00.15 |
ansible.builtin.debug
|
ansible-hardening : Check for /tmp on mounted filesystem
|
...tasks/rhel7stig/misc.yml
:
100
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:47 +0000 |
00:00:00.15 |
ansible.builtin.debug
|
ansible-hardening : Check for /var/log/audit on mounted filesystem
|
...tasks/rhel7stig/misc.yml
:
88
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:47 +0000 |
00:00:00.15 |
ansible.builtin.debug
|
ansible-hardening : Check for /var on mounted filesystem
|
...tasks/rhel7stig/misc.yml
:
76
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:47 +0000 |
00:00:00.15 |
ansible.builtin.debug
|
ansible-hardening : Check for /home on mounted filesystem
|
...tasks/rhel7stig/misc.yml
:
64
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:45 +0000 |
00:00:01.50 |
ansible.builtin.systemd
|
ansible-hardening : V-71993 - The x86 Ctrl-Alt-Delete key sequence must be disabled
|
...tasks/rhel7stig/misc.yml
:
52
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:44 +0000 |
00:00:00.74 |
ansible.builtin.systemd
|
ansible-hardening : V-71993 - The x86 Ctrl-Alt-Delete key sequence must be disabled
|
...tasks/rhel7stig/misc.yml
:
41
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:44 +0000 |
00:00:00.15 |
ansible.builtin.service
|
ansible-hardening : V-71985 - File system automounter must be disabled unless required.
|
...tasks/rhel7stig/misc.yml
:
25
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:44 +0000 |
00:00:00.43 |
ansible.builtin.command
|
ansible-hardening : Check autofs service
|
...tasks/rhel7stig/misc.yml
:
16
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:43 +0000 |
00:00:00.16 |
ansible.builtin.debug
|
ansible-hardening : V-72039 - All system device files must be correctly labeled to prevent unauthorized modification.
|
...tasks/rhel7stig/lsm.yml
:
124
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:43 +0000 |
00:00:00.16 |
ansible.builtin.command
|
ansible-hardening : Check for unlabeled device files
|
...tasks/rhel7stig/lsm.yml
:
111
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:43 +0000 |
00:00:00.16 |
ansible.builtin.file
|
ansible-hardening : Relabel files on next boot if SELinux mode changed
|
...tasks/rhel7stig/lsm.yml
:
95
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:43 +0000 |
00:00:00.16 |
ansible.posix.selinux
|
ansible-hardening : Ensure SELinux is in enforcing mode on the next reboot
|
...tasks/rhel7stig/lsm.yml
:
81
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:42 +0000 |
00:00:00.88 |
ansible.builtin.service
|
ansible-hardening : Ensure AppArmor is running
|
...tasks/rhel7stig/lsm.yml
:
62
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:41 +0000 |
00:00:00.75 |
ansible.builtin.service
|
ansible-hardening : Ensure AppArmor is enabled at boot time
|
...tasks/rhel7stig/lsm.yml
:
47
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:40 +0000 |
00:00:00.45 |
ansible.builtin.command
|
ansible-hardening : Check if apparmor is running
|
...tasks/rhel7stig/lsm.yml
:
34
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:40 +0000 |
00:00:00.47 |
ansible.builtin.command
|
ansible-hardening : Check apparmor_status output
|
...tasks/rhel7stig/lsm.yml
:
16
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:39 +0000 |
00:00:00.84 |
ansible.builtin.copy
|
ansible-hardening : V-77821 - Datagram Congestion Control Protocol (DCCP) kernel module must be disabled
|
...tasks/rhel7stig/kernel.yml
:
102
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:39 +0000 |
00:00:00.16 |
ansible.builtin.debug
|
ansible-hardening : Print a warning if FIPS isn't enabled
|
...tasks/rhel7stig/kernel.yml
:
88
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:39 +0000 |
00:00:00.12 |
ansible.builtin.command
|
ansible-hardening : Check if FIPS is enabled
|
...tasks/rhel7stig/kernel.yml
:
77
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:38 +0000 |
00:00:00.16 |
ansible.builtin.service
|
ansible-hardening : V-72057 - Kernel core dumps must be disabled unless needed.
|
...tasks/rhel7stig/kernel.yml
:
64
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:38 +0000 |
00:00:00.44 |
ansible.builtin.command
|
ansible-hardening : Check kdump service
|
...tasks/rhel7stig/kernel.yml
:
53
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:34 +0000 |
00:00:03.76 |
ansible.posix.sysctl
|
ansible-hardening : Set sysctl configurations
|
...tasks/rhel7stig/kernel.yml
:
29
|
...setup-hosts.yml
|
13
|
|
|
|
|
1 |
08 Dec 2025 13:32:34 +0000 |
00:00:00.44 |
ansible.builtin.lineinfile
|
ansible-hardening : V-71983 - USB mass storage must be disabled.
|
...tasks/rhel7stig/kernel.yml
:
16
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:33 +0000 |
00:00:00.13 |
ansible.builtin.template
|
ansible-hardening : Create a GDM keyfile for machine-wide settings
|
...tasks/rhel7stig/graphical.yml
:
134
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:33 +0000 |
00:00:00.15 |
ansible.builtin.copy
|
ansible-hardening : Create a GDM profile for displaying a login banner
|
...tasks/rhel7stig/graphical.yml
:
120
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:33 +0000 |
00:00:00.16 |
ansible.builtin.template
|
ansible-hardening : Prevent users from changing graphical session locking configurations
|
...tasks/rhel7stig/graphical.yml
:
104
|
...setup-hosts.yml
|
6
|
|
|
|
|
1 |
08 Dec 2025 13:32:33 +0000 |
00:00:00.15 |
ansible.builtin.template
|
ansible-hardening : Configure graphical session locking
|
...tasks/rhel7stig/graphical.yml
:
88
|
...setup-hosts.yml
|
6
|
|
|
|
|
1 |
08 Dec 2025 13:32:32 +0000 |
00:00:00.13 |
ansible.builtin.file
|
ansible-hardening : Create dconf directories
|
...tasks/rhel7stig/graphical.yml
:
69
|
...setup-hosts.yml
|
7
|
|
|
|
|
1 |
08 Dec 2025 13:32:32 +0000 |
00:00:00.16 |
ansible.builtin.copy
|
ansible-hardening : Create a user profile in dconf
|
...tasks/rhel7stig/graphical.yml
:
55
|
...setup-hosts.yml
|
6
|
|
|
|
|
1 |
08 Dec 2025 13:32:32 +0000 |
00:00:00.42 |
ansible.builtin.stat
|
ansible-hardening : Check for dconf profiles
|
...tasks/rhel7stig/graphical.yml
:
48
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:32 +0000 |
00:00:00.15 |
ansible.builtin.lineinfile
|
ansible-hardening : V-71955 - The operating system must not allow guest logon to the system.
|
...tasks/rhel7stig/graphical.yml
:
35
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:31 +0000 |
00:00:00.15 |
ansible.builtin.lineinfile
|
ansible-hardening : V-71953 - The operating system must not allow an unattended or automatic logon to the system via a graphical user interface
|
...tasks/rhel7stig/graphical.yml
:
22
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:31 +0000 |
00:00:00.41 |
ansible.builtin.stat
|
ansible-hardening : Check if gdm is installed and configured
|
...tasks/rhel7stig/graphical.yml
:
16
|
...setup-hosts.yml
|
1
|
|
|
|
|
1 |
08 Dec 2025 13:32:31 +0000 |
00:00:00.12 |
ansible.builtin.file
|
ansible-hardening : Set owner/group owner on /etc/cron.allow
|
...tasks/rhel7stig/file_perms.yml
:
144
|
...setup-hosts.yml
|
5
|
|
|
|
|
1 |
08 Dec 2025 13:32:30 +0000 |
00:00:00.43 |
ansible.builtin.stat
|
ansible-hardening : Check if /etc/cron.allow exists
|
...tasks/rhel7stig/file_perms.yml
:
137
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:30 +0000 |
00:00:00.13 |
ansible.builtin.debug
|
ansible-hardening : V-72047 - All world-writable directories must be group-owned by root, sys, bin, or an application group.
|
...tasks/rhel7stig/file_perms.yml
:
124
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:30 +0000 |
00:00:00.15 |
ansible.builtin.shell
|
ansible-hardening : Find all world-writable directories
|
...tasks/rhel7stig/file_perms.yml
:
113
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:29 +0000 |
00:00:00.16 |
ansible.builtin.file
|
ansible-hardening : Set proper owner, group owner, and permissions on home directories
|
...tasks/rhel7stig/file_perms.yml
:
95
|
...setup-hosts.yml
|
6
|
|
|
|
|
1 |
08 Dec 2025 13:32:29 +0000 |
00:00:00.12 |
ansible.builtin.debug
|
ansible-hardening : V-72009 - All files and directories must have a valid group owner.
|
...tasks/rhel7stig/file_perms.yml
:
81
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:29 +0000 |
00:00:00.16 |
ansible.builtin.command
|
ansible-hardening : Search for files/directories with an invalid group owner
|
...tasks/rhel7stig/file_perms.yml
:
72
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:29 +0000 |
00:00:00.13 |
ansible.builtin.debug
|
ansible-hardening : V-72007 - All files and directories must have a valid owner.
|
...tasks/rhel7stig/file_perms.yml
:
58
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:29 +0000 |
00:00:00.27 |
ansible.builtin.command
|
ansible-hardening : Search for files/directories with an invalid owner
|
...tasks/rhel7stig/file_perms.yml
:
49
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:28 +0000 |
00:00:00.16 |
shell
|
ansible-hardening : V-71849 - Reset file permissions/ownership to vendor values
|
...tasks/rhel7stig/file_perms.yml
:
29
|
...setup-hosts.yml
|
5
|
|
|
|
|
1 |
08 Dec 2025 13:32:28 +0000 |
00:00:00.12 |
ansible.builtin.shell
|
ansible-hardening : V-71849 - Get packages with incorrect file permissions or ownership
|
...tasks/rhel7stig/file_perms.yml
:
16
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:28 +0000 |
00:00:00.12 |
ansible.builtin.file
|
ansible-hardening : Remove .shosts or shosts.equiv files
|
...tasks/rhel7stig/auth.yml
:
241
|
...setup-hosts.yml
|
5
|
|
|
|
|
1 |
08 Dec 2025 13:32:28 +0000 |
00:00:00.16 |
ansible.builtin.async_status
|
ansible-hardening : Ensure .shosts find has finished
|
...tasks/rhel7stig/auth.yml
:
225
|
...setup-hosts.yml
|
5
|
|
|
|
|
1 |
08 Dec 2025 13:32:27 +0000 |
00:00:00.15 |
ansible.builtin.debug
|
ansible-hardening : V-72275 - Display date/time of last logon after logon
|
...tasks/rhel7stig/auth.yml
:
213
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:27 +0000 |
00:00:00.42 |
ansible.builtin.command
|
ansible-hardening : Check for pam_lastlog in PAM configuration
|
...tasks/rhel7stig/auth.yml
:
204
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:27 +0000 |
00:00:00.13 |
ansible.builtin.blockinfile
|
ansible-hardening : V-72217 - The operating system must limit the number of concurrent sessions to 10 for all accounts and/or account types
|
...tasks/rhel7stig/auth.yml
:
188
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:27 +0000 |
00:00:00.16 |
ansible.builtin.lineinfile
|
ansible-hardening : Set CLASS for grub file
|
...tasks/rhel7stig/auth.yml
:
170
|
...setup-hosts.yml
|
6
|
|
|
|
|
1 |
08 Dec 2025 13:32:26 +0000 |
00:00:00.16 |
ansible.builtin.blockinfile
|
ansible-hardening : Define password options for grub
|
...tasks/rhel7stig/auth.yml
:
159
|
...setup-hosts.yml
|
6
|
|
|
|
|
1 |
08 Dec 2025 13:32:26 +0000 |
00:00:00.42 |
ansible.builtin.stat
|
ansible-hardening : Check if GRUB2 custom file exists
|
...tasks/rhel7stig/auth.yml
:
149
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:25 +0000 |
00:00:00.41 |
ansible.builtin.stat
|
ansible-hardening : Check if sssd.conf exists
|
...tasks/rhel7stig/auth.yml
:
139
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:25 +0000 |
00:00:00.12 |
debug
|
ansible-hardening : V-71949 - Users must re-authenticate for privilege escalation
|
...tasks/rhel7stig/auth.yml
:
124
|
...setup-hosts.yml
|
5
|
|
|
|
|
1 |
08 Dec 2025 13:32:25 +0000 |
00:00:00.43 |
ansible.builtin.shell
|
ansible-hardening : Check for '!authenticate' in sudoers files
|
...tasks/rhel7stig/auth.yml
:
115
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:25 +0000 |
00:00:00.14 |
debug
|
ansible-hardening : V-71947 - Users must provide a password for privilege escalation
|
...tasks/rhel7stig/auth.yml
:
100
|
...setup-hosts.yml
|
5
|
|
|
|
|
1 |
08 Dec 2025 13:32:24 +0000 |
00:00:00.45 |
ansible.builtin.shell
|
ansible-hardening : Check for 'nopasswd' in sudoers files
|
...tasks/rhel7stig/auth.yml
:
89
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:24 +0000 |
00:00:00.15 |
ansible.builtin.blockinfile
|
ansible-hardening : Lock accounts after three failed login attempts a 15 minute period
|
...tasks/rhel7stig/auth.yml
:
66
|
...setup-hosts.yml
|
5
|
|
|
|
|
1 |
08 Dec 2025 13:32:24 +0000 |
00:00:00.15 |
ansible.builtin.lineinfile
|
ansible-hardening : Prevent users with blank or null passwords from authenticating (Red Hat)
|
...tasks/rhel7stig/auth.yml
:
49
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:23 +0000 |
00:00:00.46 |
ansible.builtin.lineinfile
|
ansible-hardening : Prevent users with blank or null passwords from authenticating (Debian/Ubuntu)
|
...tasks/rhel7stig/auth.yml
:
33
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:23 +0000 |
00:00:00.46 |
ansible.builtin.lineinfile
|
ansible-hardening : Set pam_faildelay configuration on Ubuntu
|
...tasks/rhel7stig/auth.yml
:
18
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:22 +0000 |
00:00:00.74 |
ansible.builtin.service
|
ansible-hardening : Ensure auditd is running and enabled at boot time
|
...tasks/rhel7stig/auditd.yml
:
165
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:21 +0000 |
00:00:00.17 |
ansible.builtin.lineinfile
|
ansible-hardening : Adjust auditd/audispd configurations
|
...tasks/rhel7stig/auditd.yml
:
146
|
...setup-hosts.yml
|
7
|
|
|
|
|
1 |
08 Dec 2025 13:32:20 +0000 |
00:00:00.98 |
ansible.builtin.template
|
ansible-hardening : Deploy rules for auditd based on STIG requirements
|
...tasks/rhel7stig/auditd.yml
:
80
|
...setup-hosts.yml
|
56
|
|
|
|
|
1 |
08 Dec 2025 13:32:20 +0000 |
00:00:00.43 |
ansible.builtin.file
|
ansible-hardening : Remove system default audit.rules file
|
...tasks/rhel7stig/auditd.yml
:
69
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:20 +0000 |
00:00:00.13 |
ansible.builtin.set_fact
|
ansible-hardening : Get valid system architectures for audit rules
|
...tasks/rhel7stig/auditd.yml
:
62
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:20 +0000 |
00:00:00.16 |
ansible.builtin.lineinfile
|
ansible-hardening : V-72085 - The operating system must encrypt the transfer of audit records off-loaded onto a different system or media from the system being audited
|
...tasks/rhel7stig/auditd.yml
:
47
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:19 +0000 |
00:00:00.16 |
ansible.builtin.lineinfile
|
ansible-hardening : V-72083 - The operating system must off-load audit records onto a different system or media from the system being audited
|
...tasks/rhel7stig/auditd.yml
:
32
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:19 +0000 |
00:00:00.41 |
ansible.builtin.stat
|
ansible-hardening : Verify that audisp-remote.conf exists
|
...tasks/rhel7stig/auditd.yml
:
24
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:18 +0000 |
00:00:00.46 |
ansible.builtin.stat
|
ansible-hardening : Verify that auditd.conf exists
|
...tasks/rhel7stig/auditd.yml
:
16
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:18 +0000 |
00:00:00.16 |
ansible.builtin.shell
|
ansible-hardening : Initialize AIDE (this will take a few minutes)
|
...tasks/rhel7stig/aide.yml
:
78
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:18 +0000 |
00:00:00.42 |
ansible.builtin.stat
|
ansible-hardening : Check to see if AIDE database is already in place
|
...tasks/rhel7stig/aide.yml
:
70
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:17 +0000 |
00:00:00.43 |
ansible.builtin.blockinfile
|
ansible-hardening : Configure AIDE to verify additional properties (Ubuntu)
|
...tasks/rhel7stig/aide.yml
:
41
|
...setup-hosts.yml
|
6
|
|
|
|
|
1 |
08 Dec 2025 13:32:16 +0000 |
00:00:00.85 |
ansible.builtin.template
|
ansible-hardening : Exclude certain directories from AIDE
|
...tasks/rhel7stig/aide.yml
:
27
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:15 +0000 |
00:00:00.75 |
ansible.builtin.stat
|
ansible-hardening : Verify that AIDE configuration directory exists
|
...tasks/rhel7stig/aide.yml
:
16
|
...setup-hosts.yml
|
2
|
|