|
|
|
1 |
08 Dec 2025 13:33:46 +0000 |
00:00:00.27 |
ansible.builtin.copy
|
keepalived : Dropping the notification scripts for switching to master (instances)
|
...roles/keepalived/tasks/main.yml
:
240
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:45 +0000 |
00:00:00.28 |
ansible.builtin.copy
|
keepalived : Dropping the general notification scripts (instances)
|
...roles/keepalived/tasks/main.yml
:
228
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:45 +0000 |
00:00:00.15 |
ansible.builtin.copy
|
keepalived : Dropping the notification scripts for failures
|
...roles/keepalived/tasks/main.yml
:
216
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:45 +0000 |
00:00:00.14 |
ansible.builtin.copy
|
keepalived : Dropping the notification scripts for switching to backup
|
...roles/keepalived/tasks/main.yml
:
204
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:45 +0000 |
00:00:00.15 |
ansible.builtin.copy
|
keepalived : Dropping the notification scripts for switching to master
|
...roles/keepalived/tasks/main.yml
:
192
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:45 +0000 |
00:00:00.15 |
ansible.builtin.copy
|
keepalived : Dropping the general notification scripts
|
...roles/keepalived/tasks/main.yml
:
180
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:44 +0000 |
00:00:00.18 |
ansible.builtin.copy
|
keepalived : Dropping the tracking scripts
|
...roles/keepalived/tasks/main.yml
:
168
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:44 +0000 |
00:00:00.15 |
ansible.builtin.lineinfile
|
keepalived : Configure keepalived extra params
|
...roles/keepalived/tasks/main.yml
:
155
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:44 +0000 |
00:00:00.16 |
ansible.builtin.stat
|
keepalived : Check that daemon options file exists
|
...roles/keepalived/tasks/main.yml
:
148
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:44 +0000 |
00:00:00.16 |
ansible.posix.sysctl
|
keepalived : Allow consuming apps to bind on non local addresses for IPv6
|
...roles/keepalived/tasks/main.yml
:
132
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:43 +0000 |
00:00:00.12 |
ansible.posix.sysctl
|
keepalived : Allow consuming apps to bind on non local addresses for IPv4
|
...roles/keepalived/tasks/main.yml
:
115
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:43 +0000 |
00:00:00.15 |
ansible.builtin.set_fact
|
keepalived : Check if IPv6 is enabled
|
...roles/keepalived/tasks/main.yml
:
109
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:43 +0000 |
00:00:00.15 |
ansible.builtin.slurp
|
keepalived : Get IPv6 enabled state
|
...roles/keepalived/tasks/main.yml
:
102
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:43 +0000 |
00:00:00.16 |
ansible.builtin.file
|
keepalived : Ensure no new "samples" folder appeared
|
...roles/keepalived/tasks/main.yml
:
93
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:43 +0000 |
00:00:00.15 |
ansible.builtin.set_fact
|
keepalived : Set testability flag
|
...roles/keepalived/tasks/main.yml
:
87
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:42 +0000 |
00:00:00.16 |
ansible.builtin.command
|
keepalived : Output keepalived version
|
...roles/keepalived/tasks/main.yml
:
79
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:42 +0000 |
00:00:00.15 |
ansible.builtin.package
|
keepalived : Install keepalived package(s)
|
...roles/keepalived/tasks/main.yml
:
63
|
...setup-infrastructure.yml
|
5
|
|
|
|
|
1 |
08 Dec 2025 13:33:42 +0000 |
00:00:00.15 |
ansible.builtin.include_tasks
|
keepalived : Configure SELinux
|
...roles/keepalived/tasks/main.yml
:
52
|
...setup-infrastructure.yml
|
5
|
|
|
|
|
1 |
08 Dec 2025 13:33:42 +0000 |
00:00:00.16 |
ansible.builtin.include_vars
|
keepalived : Gather variables for each operating system
|
...roles/keepalived/tasks/main.yml
:
36
|
...setup-infrastructure.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:42 +0000 |
00:00:00.16 |
ansible.builtin.debug
|
keepalived : Debug role vars (scripts)
|
...roles/keepalived/tasks/main.yml
:
31
|
...setup-infrastructure.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:33:41 +0000 |
00:00:00.15 |
ansible.builtin.debug
|
keepalived : Debug role vars (virtual_servers)
|
...roles/keepalived/tasks/main.yml
:
26
|
...setup-infrastructure.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:33:41 +0000 |
00:00:00.16 |
ansible.builtin.debug
|
keepalived : Debug role vars (sync_groups)
|
...roles/keepalived/tasks/main.yml
:
21
|
...setup-infrastructure.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:33:41 +0000 |
00:00:00.16 |
ansible.builtin.debug
|
keepalived : Debug role vars (instances)
|
...roles/keepalived/tasks/main.yml
:
16
|
...setup-infrastructure.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:33:40 +0000 |
00:00:00.72 |
ansible.builtin.file
|
Remove legacy haproxy configuration files
|
...openstack/osa/playbooks/haproxy.yml
:
45
|
...setup-infrastructure.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:33:40 +0000 |
00:00:00.14 |
ansible.builtin.include_role
|
Including unbound-clients tasks
|
...openstack/osa/playbooks/haproxy.yml
:
40
|
...setup-infrastructure.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:33:40 +0000 |
00:00:00.14 |
ansible.builtin.include_role
|
Including container-setup tasks
|
...openstack/osa/playbooks/haproxy.yml
:
36
|
...setup-infrastructure.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:33:38 +0000 |
00:00:01.83 |
ansible.builtin.setup
|
openstack.osa.gather_extra_facts : Gather additional facts
|
...gather_extra_facts/tasks/main.yml
:
16
|
...setup-infrastructure.yml
|
1
|
|
|
|
|
1 |
08 Dec 2025 13:33:38 +0000 |
00:00:00.16 |
ansible.builtin.include_role
|
Gather additional facts
|
...openstack/osa/playbooks/haproxy.yml
:
23
|
...setup-infrastructure.yml
|
1
|
|
|
|
|
1 |
08 Dec 2025 13:33:35 +0000 |
00:00:02.07 |
ansible.builtin.include_role
|
Including unbound-clients role
|
...openstack/osa/playbooks/unbound.yml
:
49
|
...setup-infrastructure.yml
|
0
|
|
|
|
|
1 |
08 Dec 2025 13:33:33 +0000 |
00:00:02.40 |
gather_facts
|
Gathering Facts
|
...openstack/osa/playbooks/unbound.yml
:
43
|
...setup-infrastructure.yml
|
1
|
|
|
|
|
1 |
08 Dec 2025 13:33:12 +0000 |
00:00:00.79 |
ansible.builtin.command
|
ansible-hardening : Generate auditd rules
|
...ansible-hardening/handlers/main.yml
:
40
|
...setup-hosts.yml
|
1
|
|
|
|
|
1 |
08 Dec 2025 13:33:11 +0000 |
00:00:00.81 |
ansible.builtin.service
|
ansible-hardening : Restart ssh
|
...ansible-hardening/handlers/main.yml
:
29
|
...setup-hosts.yml
|
1
|
|
|
|
|
1 |
08 Dec 2025 13:33:11 +0000 |
00:00:00.17 |
ansible.builtin.include_tasks
|
ansible-hardening : Including contrib tasks
|
...ansible-hardening/tasks/main.yml
:
62
|
...setup-hosts.yml
|
1
|
|
|
|
|
1 |
08 Dec 2025 13:33:10 +0000 |
00:00:00.43 |
ansible.builtin.file
|
ansible-hardening : Remove the temporary directory
|
...tasks/rhel7stig/main.yml
:
106
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:33:10 +0000 |
00:00:00.59 |
ansible.builtin.replace
|
ansible-hardening : Manage motd in pam.d
|
...tasks/rhel7stig/sshd.yml
:
152
|
...setup-hosts.yml
|
1
|
|
|
|
|
1 |
08 Dec 2025 13:33:08 +0000 |
00:00:01.44 |
ansible.builtin.file
|
ansible-hardening : Private host key files must have mode 0600 or less
|
...tasks/rhel7stig/sshd.yml
:
141
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:08 +0000 |
00:00:00.42 |
ansible.builtin.shell
|
ansible-hardening : Determine existing private ssh host keys
|
...tasks/rhel7stig/sshd.yml
:
131
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:33:06 +0000 |
00:00:01.35 |
ansible.builtin.file
|
ansible-hardening : Public host key files must have mode 0644 or less
|
...tasks/rhel7stig/sshd.yml
:
120
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:06 +0000 |
00:00:00.42 |
ansible.builtin.shell
|
ansible-hardening : Determine existing public ssh host keys
|
...tasks/rhel7stig/sshd.yml
:
110
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:33:05 +0000 |
00:00:00.72 |
ansible.builtin.service
|
ansible-hardening : Ensure sshd is enabled at boot time
|
...tasks/rhel7stig/sshd.yml
:
99
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:33:05 +0000 |
00:00:00.47 |
ansible.builtin.blockinfile
|
ansible-hardening : Adjust ssh server configuration based on STIG requirements
|
...tasks/rhel7stig/sshd.yml
:
61
|
...setup-hosts.yml
|
21
|
|
|
|
|
1 |
08 Dec 2025 13:32:59 +0000 |
00:00:05.92 |
ansible.builtin.lineinfile
|
ansible-hardening : Drop options from SSH config that we manage
|
...tasks/rhel7stig/sshd.yml
:
29
|
...setup-hosts.yml
|
21
|
|
|
|
|
1 |
08 Dec 2025 13:32:58 +0000 |
00:00:00.85 |
ansible.builtin.copy
|
ansible-hardening : Copy login warning banner
|
...tasks/rhel7stig/sshd.yml
:
16
|
...setup-hosts.yml
|
5
|
|
|
|
|
1 |
08 Dec 2025 13:32:57 +0000 |
00:00:00.15 |
ansible.builtin.debug
|
ansible-hardening : V-72313 - Change SNMP community strings from default.
|
...tasks/rhel7stig/misc.yml
:
433
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:57 +0000 |
00:00:00.45 |
ansible.builtin.command
|
ansible-hardening : Check to see if snmpd config contains public/private
|
...tasks/rhel7stig/misc.yml
:
424
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:57 +0000 |
00:00:00.16 |
ansible.builtin.debug
|
ansible-hardening : V-72305 - TFTP must be configured to operate in secure mode
|
...tasks/rhel7stig/misc.yml
:
413
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:56 +0000 |
00:00:00.16 |
ansible.builtin.command
|
ansible-hardening : Check TFTP configuration mode
|
...tasks/rhel7stig/misc.yml
:
402
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:56 +0000 |
00:00:00.43 |
ansible.builtin.stat
|
ansible-hardening : Check for TFTP server configuration file
|
...tasks/rhel7stig/misc.yml
:
394
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:56 +0000 |
00:00:00.16 |
ansible.builtin.lineinfile
|
ansible-hardening : V-72297 - Prevent unrestricted mail relaying
|
...tasks/rhel7stig/misc.yml
:
381
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:55 +0000 |
00:00:00.41 |
ansible.builtin.stat
|
ansible-hardening : Check for postfix configuration file
|
...tasks/rhel7stig/misc.yml
:
374
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:55 +0000 |
00:00:00.15 |
ansible.builtin.debug
|
ansible-hardening : V-72295 - Network interfaces must not be in promiscuous mode.
|
...tasks/rhel7stig/misc.yml
:
362
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:55 +0000 |
00:00:00.42 |
ansible.builtin.shell
|
ansible-hardening : Check for interfaces in promiscuous mode
|
...tasks/rhel7stig/misc.yml
:
353
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:54 +0000 |
00:00:00.15 |
ansible.builtin.debug
|
ansible-hardening : V-72281 - For systems using DNS resolution, at least two name servers must be configured.
|
...tasks/rhel7stig/misc.yml
:
340
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:53 +0000 |
00:00:01.44 |
command
|
ansible-hardening : Count nameserver entries in /etc/resolv.conf
|
...tasks/rhel7stig/misc.yml
:
330
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:53 +0000 |
00:00:00.16 |
ansible.builtin.command
|
ansible-hardening : Limit new TCP connections to 25/minute and allow bursting to 100
|
...tasks/rhel7stig/misc.yml
:
314
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:52 +0000 |
00:00:00.16 |
ansible.builtin.service
|
ansible-hardening : Ensure firewalld is running and enabled
|
...tasks/rhel7stig/misc.yml
:
301
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:52 +0000 |
00:00:00.45 |
ansible.builtin.command
|
ansible-hardening : Check firewalld status
|
...tasks/rhel7stig/misc.yml
:
292
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:52 +0000 |
00:00:00.15 |
ansible.builtin.template
|
ansible-hardening : V-72269 - Synchronize system clock (configuration file)
|
...tasks/rhel7stig/misc.yml
:
276
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:51 +0000 |
00:00:00.44 |
ansible.builtin.stat
|
ansible-hardening : Check if chrony configuration file exists
|
...tasks/rhel7stig/misc.yml
:
269
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:51 +0000 |
00:00:00.16 |
ansible.builtin.service
|
ansible-hardening : Start and enable chrony
|
...tasks/rhel7stig/misc.yml
:
256
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:51 +0000 |
00:00:00.42 |
ansible.builtin.blockinfile
|
ansible-hardening : V-72223 - Set 10 minute timeout on communication sessions
|
...tasks/rhel7stig/misc.yml
:
240
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:50 +0000 |
00:00:00.15 |
ansible.builtin.service
|
ansible-hardening : Ensure ClamAV is running
|
...tasks/rhel7stig/misc.yml
:
228
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:50 +0000 |
00:00:00.15 |
ansible.builtin.command
|
ansible-hardening : Update ClamAV database
|
...tasks/rhel7stig/misc.yml
:
214
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:50 +0000 |
00:00:00.43 |
ansible.builtin.shell
|
ansible-hardening : Check if ClamAV update process is already running
|
...tasks/rhel7stig/misc.yml
:
205
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:49 +0000 |
00:00:00.16 |
ansible.builtin.lineinfile
|
ansible-hardening : Allow automatic freshclam updates
|
...tasks/rhel7stig/misc.yml
:
190
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:49 +0000 |
00:00:00.15 |
ansible.builtin.file
|
ansible-hardening : Ensure ClamAV socket directory exists
|
...tasks/rhel7stig/misc.yml
:
174
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:49 +0000 |
00:00:00.15 |
ansible.builtin.lineinfile
|
ansible-hardening : Set ClamAV server type as socket
|
...tasks/rhel7stig/misc.yml
:
158
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:49 +0000 |
00:00:00.13 |
ansible.builtin.lineinfile
|
ansible-hardening : Remove 'Example' line from ClamAV configuration files
|
...tasks/rhel7stig/misc.yml
:
140
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:48 +0000 |
00:00:00.43 |
ansible.builtin.stat
|
ansible-hardening : Check if ClamAV is installed
|
...tasks/rhel7stig/misc.yml
:
132
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:48 +0000 |
00:00:00.14 |
ansible.builtin.debug
|
ansible-hardening : V-72209 - The system must send rsyslog output to a log aggregation server.
|
...tasks/rhel7stig/misc.yml
:
121
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:48 +0000 |
00:00:00.43 |
ansible.builtin.command
|
ansible-hardening : Check if syslog output is being sent to another server
|
...tasks/rhel7stig/misc.yml
:
112
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:47 +0000 |
00:00:00.15 |
ansible.builtin.debug
|
ansible-hardening : Check for /tmp on mounted filesystem
|
...tasks/rhel7stig/misc.yml
:
100
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:47 +0000 |
00:00:00.15 |
ansible.builtin.debug
|
ansible-hardening : Check for /var/log/audit on mounted filesystem
|
...tasks/rhel7stig/misc.yml
:
88
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:47 +0000 |
00:00:00.15 |
ansible.builtin.debug
|
ansible-hardening : Check for /var on mounted filesystem
|
...tasks/rhel7stig/misc.yml
:
76
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:47 +0000 |
00:00:00.15 |
ansible.builtin.debug
|
ansible-hardening : Check for /home on mounted filesystem
|
...tasks/rhel7stig/misc.yml
:
64
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:45 +0000 |
00:00:01.50 |
ansible.builtin.systemd
|
ansible-hardening : V-71993 - The x86 Ctrl-Alt-Delete key sequence must be disabled
|
...tasks/rhel7stig/misc.yml
:
52
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:44 +0000 |
00:00:00.74 |
ansible.builtin.systemd
|
ansible-hardening : V-71993 - The x86 Ctrl-Alt-Delete key sequence must be disabled
|
...tasks/rhel7stig/misc.yml
:
41
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:44 +0000 |
00:00:00.15 |
ansible.builtin.service
|
ansible-hardening : V-71985 - File system automounter must be disabled unless required.
|
...tasks/rhel7stig/misc.yml
:
25
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:44 +0000 |
00:00:00.43 |
ansible.builtin.command
|
ansible-hardening : Check autofs service
|
...tasks/rhel7stig/misc.yml
:
16
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:43 +0000 |
00:00:00.16 |
ansible.builtin.debug
|
ansible-hardening : V-72039 - All system device files must be correctly labeled to prevent unauthorized modification.
|
...tasks/rhel7stig/lsm.yml
:
124
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:43 +0000 |
00:00:00.16 |
ansible.builtin.command
|
ansible-hardening : Check for unlabeled device files
|
...tasks/rhel7stig/lsm.yml
:
111
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:43 +0000 |
00:00:00.16 |
ansible.builtin.file
|
ansible-hardening : Relabel files on next boot if SELinux mode changed
|
...tasks/rhel7stig/lsm.yml
:
95
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:43 +0000 |
00:00:00.16 |
ansible.posix.selinux
|
ansible-hardening : Ensure SELinux is in enforcing mode on the next reboot
|
...tasks/rhel7stig/lsm.yml
:
81
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:42 +0000 |
00:00:00.88 |
ansible.builtin.service
|
ansible-hardening : Ensure AppArmor is running
|
...tasks/rhel7stig/lsm.yml
:
62
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:41 +0000 |
00:00:00.75 |
ansible.builtin.service
|
ansible-hardening : Ensure AppArmor is enabled at boot time
|
...tasks/rhel7stig/lsm.yml
:
47
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:40 +0000 |
00:00:00.45 |
ansible.builtin.command
|
ansible-hardening : Check if apparmor is running
|
...tasks/rhel7stig/lsm.yml
:
34
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:40 +0000 |
00:00:00.47 |
ansible.builtin.command
|
ansible-hardening : Check apparmor_status output
|
...tasks/rhel7stig/lsm.yml
:
16
|
...setup-hosts.yml
|
3
|
|
|
|
|
1 |
08 Dec 2025 13:32:39 +0000 |
00:00:00.84 |
ansible.builtin.copy
|
ansible-hardening : V-77821 - Datagram Congestion Control Protocol (DCCP) kernel module must be disabled
|
...tasks/rhel7stig/kernel.yml
:
102
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:39 +0000 |
00:00:00.16 |
ansible.builtin.debug
|
ansible-hardening : Print a warning if FIPS isn't enabled
|
...tasks/rhel7stig/kernel.yml
:
88
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:39 +0000 |
00:00:00.12 |
ansible.builtin.command
|
ansible-hardening : Check if FIPS is enabled
|
...tasks/rhel7stig/kernel.yml
:
77
|
...setup-hosts.yml
|
2
|
|
|
|
|
1 |
08 Dec 2025 13:32:38 +0000 |
00:00:00.16 |
ansible.builtin.service
|
ansible-hardening : V-72057 - Kernel core dumps must be disabled unless needed.
|
...tasks/rhel7stig/kernel.yml
:
64
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:38 +0000 |
00:00:00.44 |
ansible.builtin.command
|
ansible-hardening : Check kdump service
|
...tasks/rhel7stig/kernel.yml
:
53
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:34 +0000 |
00:00:03.76 |
ansible.posix.sysctl
|
ansible-hardening : Set sysctl configurations
|
...tasks/rhel7stig/kernel.yml
:
29
|
...setup-hosts.yml
|
13
|
|
|
|
|
1 |
08 Dec 2025 13:32:34 +0000 |
00:00:00.44 |
ansible.builtin.lineinfile
|
ansible-hardening : V-71983 - USB mass storage must be disabled.
|
...tasks/rhel7stig/kernel.yml
:
16
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:33 +0000 |
00:00:00.13 |
ansible.builtin.template
|
ansible-hardening : Create a GDM keyfile for machine-wide settings
|
...tasks/rhel7stig/graphical.yml
:
134
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:33 +0000 |
00:00:00.15 |
ansible.builtin.copy
|
ansible-hardening : Create a GDM profile for displaying a login banner
|
...tasks/rhel7stig/graphical.yml
:
120
|
...setup-hosts.yml
|
4
|
|
|
|
|
1 |
08 Dec 2025 13:32:33 +0000 |
00:00:00.16 |
ansible.builtin.template
|
ansible-hardening : Prevent users from changing graphical session locking configurations
|
...tasks/rhel7stig/graphical.yml
:
104
|
...setup-hosts.yml
|
6
|
|
|
|
|
1 |
08 Dec 2025 13:32:33 +0000 |
00:00:00.15 |
ansible.builtin.template
|
ansible-hardening : Configure graphical session locking
|
...tasks/rhel7stig/graphical.yml
:
88
|
...setup-hosts.yml
|
6
|
|
|
|
|
1 |
08 Dec 2025 13:32:32 +0000 |
00:00:00.13 |
ansible.builtin.file
|
ansible-hardening : Create dconf directories
|
...tasks/rhel7stig/graphical.yml
:
69
|
...setup-hosts.yml
|
7
|
|
|
|
|
1 |
08 Dec 2025 13:32:32 +0000 |
00:00:00.16 |
ansible.builtin.copy
|
ansible-hardening : Create a user profile in dconf
|
...tasks/rhel7stig/graphical.yml
:
55
|
...setup-hosts.yml
|
6
|
|