# STDOUT: ---v---v---v---v---v--- Using /etc/ansible/ansible.cfg as config file PLAY [Ensure that we can set the policy using this role (without reboot)] ****** TASK [Gathering Facts] ********************************************************* ok: [sut] TASK [Set correct base policy] ************************************************* TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** skipping: [sut] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat_8.5.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_8.5.yml", "skip_reason": "Conditional result was False" } TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** ok: [sut] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [linux-system-roles.crypto_policies : include_tasks] ********************** included: /WORKDIR/dist-git-crypto_policies-change-recursive-link-to-role-dir-links-dX8VkQ/tests/roles/linux-system-roles.crypto_policies/tasks/gather_facts.yml for sut TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** ok: [sut] => { "changed": false, "cmd": [ "update-crypto-policies", "--show" ], "delta": "0:00:00.090842", "end": "2022-01-04 03:00:16.980306", "rc": 0, "start": "2022-01-04 03:00:16.889464" } STDOUT: DEFAULT TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ ok: [sut] => { "ansible_facts": { "crypto_policies_active": "DEFAULT" }, "changed": false } TASK [linux-system-roles.crypto_policies : Find base policies files] *********** ok: [sut] => { "changed": false, "examined": 7, "files": [ { "atime": 1634204509.975367, "ctime": 1634204458.2273672, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334162, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2072, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.228367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334163, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 267, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.229367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334164, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1645, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.2303672, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334165, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2030, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.231367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334166, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2390, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } ], "matched": 5 } TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** ok: [sut] => { "ansible_facts": { "crypto_policies_available_policies": [ "DEFAULT", "LEGACY", "FUTURE", "EMPTY", "FIPS" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** ok: [sut] => { "changed": false, "examined": 5, "files": [ { "atime": 1623934914.0, "ctime": 1634204458.232367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359730, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 318, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.233367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359731, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.2343671, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359732, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 90, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.235367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359733, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 123, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.236367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359734, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1910, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } ], "matched": 5 } TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** ok: [sut] => { "ansible_facts": { "crypto_policies_available_subpolicies": [ "OSPP", "AD-SUPPORT", "ECDHE-ONLY", "NO-SHA1", "NO-CAMELLIA" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** ok: [sut] => { "ansible_facts": { "crypto_policies_available_modules": [ "OSPP", "AD-SUPPORT", "ECDHE-ONLY", "NO-SHA1", "NO-CAMELLIA" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** changed: [sut] => { "changed": true, "cmd": [ "update-crypto-policies", "--no-reload", "--set", "LEGACY" ], "delta": "0:00:00.181141", "end": "2022-01-04 03:00:18.453307", "rc": 0, "start": "2022-01-04 03:00:18.272166" } STDOUT: Setting system policy to LEGACY Note: System-wide crypto policies are applied on application start-up. It is recommended to restart the system for the change of policies to fully take place. TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** ok: [sut] => { "ansible_facts": { "crypto_policies_reboot_required": true }, "changed": false } TASK [linux-system-roles.crypto_policies : include_tasks] ********************** included: /WORKDIR/dist-git-crypto_policies-change-recursive-link-to-role-dir-links-dX8VkQ/tests/roles/linux-system-roles.crypto_policies/tasks/gather_facts.yml for sut TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** ok: [sut] => { "changed": false, "cmd": [ "update-crypto-policies", "--show" ], "delta": "0:00:00.073458", "end": "2022-01-04 03:00:18.863650", "rc": 0, "start": "2022-01-04 03:00:18.790192" } STDOUT: LEGACY TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ ok: [sut] => { "ansible_facts": { "crypto_policies_active": "LEGACY" }, "changed": false } TASK [Verify that base policy was updated] ************************************* ok: [sut] => { "changed": false } MSG: All assertions passed TASK [Set correct base policy and subpolicy] *********************************** TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** skipping: [sut] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat_8.5.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_8.5.yml", "skip_reason": "Conditional result was False" } TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** ok: [sut] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [linux-system-roles.crypto_policies : include_tasks] ********************** included: /WORKDIR/dist-git-crypto_policies-change-recursive-link-to-role-dir-links-dX8VkQ/tests/roles/linux-system-roles.crypto_policies/tasks/gather_facts.yml for sut TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** ok: [sut] => { "changed": false, "cmd": [ "update-crypto-policies", "--show" ], "delta": "0:00:00.073144", "end": "2022-01-04 03:00:21.347314", "rc": 0, "start": "2022-01-04 03:00:21.274170" } STDOUT: LEGACY TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ ok: [sut] => { "ansible_facts": { "crypto_policies_active": "LEGACY" }, "changed": false } TASK [linux-system-roles.crypto_policies : Find base policies files] *********** ok: [sut] => { "changed": false, "examined": 7, "files": [ { "atime": 1634204509.975367, "ctime": 1634204458.2273672, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334162, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2072, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.228367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334163, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 267, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.229367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334164, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1645, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.2303672, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334165, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2030, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1641265218.339317, "ctime": 1634204458.231367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334166, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2390, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } ], "matched": 5 } TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** ok: [sut] => { "ansible_facts": { "crypto_policies_available_policies": [ "DEFAULT", "LEGACY", "FUTURE", "EMPTY", "FIPS" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** ok: [sut] => { "changed": false, "examined": 5, "files": [ { "atime": 1623934914.0, "ctime": 1634204458.232367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359730, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 318, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.233367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359731, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.2343671, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359732, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 90, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.235367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359733, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 123, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.236367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359734, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1910, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } ], "matched": 5 } TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** ok: [sut] => { "ansible_facts": { "crypto_policies_available_subpolicies": [ "OSPP", "AD-SUPPORT", "ECDHE-ONLY", "NO-SHA1", "NO-CAMELLIA" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** ok: [sut] => { "ansible_facts": { "crypto_policies_available_modules": [ "OSPP", "AD-SUPPORT", "ECDHE-ONLY", "NO-SHA1", "NO-CAMELLIA" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** changed: [sut] => { "changed": true, "cmd": [ "update-crypto-policies", "--no-reload", "--set", "DEFAULT:NO-SHA1" ], "delta": "0:00:00.162698", "end": "2022-01-04 03:00:22.531246", "rc": 0, "start": "2022-01-04 03:00:22.368548" } STDOUT: Setting system policy to DEFAULT:NO-SHA1 Note: System-wide crypto policies are applied on application start-up. It is recommended to restart the system for the change of policies to fully take place. TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** ok: [sut] => { "ansible_facts": { "crypto_policies_reboot_required": true }, "changed": false } TASK [linux-system-roles.crypto_policies : include_tasks] ********************** included: /WORKDIR/dist-git-crypto_policies-change-recursive-link-to-role-dir-links-dX8VkQ/tests/roles/linux-system-roles.crypto_policies/tasks/gather_facts.yml for sut TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** ok: [sut] => { "changed": false, "cmd": [ "update-crypto-policies", "--show" ], "delta": "0:00:00.073568", "end": "2022-01-04 03:00:22.931872", "rc": 0, "start": "2022-01-04 03:00:22.858304" } STDOUT: DEFAULT:NO-SHA1 TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ ok: [sut] => { "ansible_facts": { "crypto_policies_active": "DEFAULT:NO-SHA1" }, "changed": false } TASK [Verify that base policy and subpolicy were updated] ********************** ok: [sut] => { "changed": false } MSG: All assertions passed TASK [Set incorrect base policy] *********************************************** TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** skipping: [sut] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat_8.5.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_8.5.yml", "skip_reason": "Conditional result was False" } TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** ok: [sut] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [linux-system-roles.crypto_policies : include_tasks] ********************** included: /WORKDIR/dist-git-crypto_policies-change-recursive-link-to-role-dir-links-dX8VkQ/tests/roles/linux-system-roles.crypto_policies/tasks/gather_facts.yml for sut TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** ok: [sut] => { "changed": false, "cmd": [ "update-crypto-policies", "--show" ], "delta": "0:00:00.072663", "end": "2022-01-04 03:00:25.279129", "rc": 0, "start": "2022-01-04 03:00:25.206466" } STDOUT: DEFAULT:NO-SHA1 TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ ok: [sut] => { "ansible_facts": { "crypto_policies_active": "DEFAULT:NO-SHA1" }, "changed": false } TASK [linux-system-roles.crypto_policies : Find base policies files] *********** ok: [sut] => { "changed": false, "examined": 7, "files": [ { "atime": 1641265222.4364378, "ctime": 1634204458.2273672, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334162, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2072, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.228367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334163, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 267, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.229367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334164, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1645, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.2303672, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334165, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2030, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1641265218.339317, "ctime": 1634204458.231367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334166, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2390, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } ], "matched": 5 } TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** ok: [sut] => { "ansible_facts": { "crypto_policies_available_policies": [ "DEFAULT", "LEGACY", "FUTURE", "EMPTY", "FIPS" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** ok: [sut] => { "changed": false, "examined": 5, "files": [ { "atime": 1623934914.0, "ctime": 1634204458.232367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359730, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 318, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.233367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359731, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.2343671, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359732, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 90, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1641265222.4534383, "ctime": 1634204458.235367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359733, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 123, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.236367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359734, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1910, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } ], "matched": 5 } TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** ok: [sut] => { "ansible_facts": { "crypto_policies_available_subpolicies": [ "OSPP", "AD-SUPPORT", "ECDHE-ONLY", "NO-SHA1", "NO-CAMELLIA" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** ok: [sut] => { "ansible_facts": { "crypto_policies_available_modules": [ "OSPP", "AD-SUPPORT", "ECDHE-ONLY", "NO-SHA1", "NO-CAMELLIA" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** fatal: [sut]: FAILED! => { "changed": true, "cmd": [ "update-crypto-policies", "--no-reload", "--set", "NOEXIST" ], "delta": "0:00:00.073966", "end": "2022-01-04 03:00:26.430992", "rc": 1, "start": "2022-01-04 03:00:26.357026" } STDERR: Unknown policy `NOEXIST`: file `NOEXIST.pol` not found in (., policies, /etc/crypto-policies/policies, /usr/share/crypto-policies/policies) MSG: non-zero return code TASK [Check that we failed in the role] **************************************** ok: [sut] => { "changed": false } MSG: All assertions passed TASK [Set incorrect subpolicy] ************************************************* TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** skipping: [sut] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat_8.5.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_8.5.yml", "skip_reason": "Conditional result was False" } TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** ok: [sut] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [linux-system-roles.crypto_policies : include_tasks] ********************** included: /WORKDIR/dist-git-crypto_policies-change-recursive-link-to-role-dir-links-dX8VkQ/tests/roles/linux-system-roles.crypto_policies/tasks/gather_facts.yml for sut TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** ok: [sut] => { "changed": false, "cmd": [ "update-crypto-policies", "--show" ], "delta": "0:00:00.074445", "end": "2022-01-04 03:00:28.759558", "rc": 0, "start": "2022-01-04 03:00:28.685113" } STDOUT: DEFAULT:NO-SHA1 TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ ok: [sut] => { "ansible_facts": { "crypto_policies_active": "DEFAULT:NO-SHA1" }, "changed": false } TASK [linux-system-roles.crypto_policies : Find base policies files] *********** ok: [sut] => { "changed": false, "examined": 7, "files": [ { "atime": 1641265222.4364378, "ctime": 1634204458.2273672, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334162, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2072, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.228367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334163, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 267, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.229367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334164, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1645, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.2303672, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334165, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2030, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1641265218.339317, "ctime": 1634204458.231367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334166, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2390, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } ], "matched": 5 } TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** ok: [sut] => { "ansible_facts": { "crypto_policies_available_policies": [ "DEFAULT", "LEGACY", "FUTURE", "EMPTY", "FIPS" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** ok: [sut] => { "changed": false, "examined": 5, "files": [ { "atime": 1623934914.0, "ctime": 1634204458.232367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359730, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 318, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.233367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359731, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.2343671, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359732, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 90, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1641265222.4534383, "ctime": 1634204458.235367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359733, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 123, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.236367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359734, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1910, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } ], "matched": 5 } TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** ok: [sut] => { "ansible_facts": { "crypto_policies_available_subpolicies": [ "OSPP", "AD-SUPPORT", "ECDHE-ONLY", "NO-SHA1", "NO-CAMELLIA" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** ok: [sut] => { "ansible_facts": { "crypto_policies_available_modules": [ "OSPP", "AD-SUPPORT", "ECDHE-ONLY", "NO-SHA1", "NO-CAMELLIA" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** fatal: [sut]: FAILED! => { "changed": true, "cmd": [ "update-crypto-policies", "--no-reload", "--set", "DEFAULT:NOEXIST" ], "delta": "0:00:00.089814", "end": "2022-01-04 03:00:29.878735", "rc": 1, "start": "2022-01-04 03:00:29.788921" } STDERR: Unknown policy `NOEXIST`: file `NOEXIST.pmod` not found in (., policies/modules, /etc/crypto-policies/policies/modules, /usr/share/crypto-policies/policies/modules) MSG: non-zero return code TASK [Check that we failed in the role] **************************************** ok: [sut] => { "changed": false } MSG: All assertions passed RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } PLAY RECAP ********************************************************************* sut : ok=51 changed=2 unreachable=0 failed=0 skipped=8 rescued=2 ignored=0 ---^---^---^---^---^--- # STDERR: ---v---v---v---v---v--- ---^---^---^---^---^---