# STDOUT: ---v---v---v---v---v--- Using /etc/ansible/ansible.cfg as config file PLAY [Ensure that crypto_policy_reload variable works] ************************* TASK [Gathering Facts] ********************************************************* ok: [sut] TASK [Run role to make sure all dependencies are installed] ******************** TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** skipping: [sut] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat_8.5.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_8.5.yml", "skip_reason": "Conditional result was False" } TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** ok: [sut] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [linux-system-roles.crypto_policies : include_tasks] ********************** included: /WORKDIR/dist-git-crypto_policies-change-recursive-link-to-role-dir-links-dX8VkQ/tests/roles/linux-system-roles.crypto_policies/tasks/gather_facts.yml for sut TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** ok: [sut] => { "changed": false, "cmd": [ "update-crypto-policies", "--show" ], "delta": "0:00:00.088563", "end": "2022-01-04 02:59:49.020332", "rc": 0, "start": "2022-01-04 02:59:48.931769" } STDOUT: DEFAULT TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ ok: [sut] => { "ansible_facts": { "crypto_policies_active": "DEFAULT" }, "changed": false } TASK [linux-system-roles.crypto_policies : Find base policies files] *********** ok: [sut] => { "changed": false, "examined": 7, "files": [ { "atime": 1634204509.975367, "ctime": 1634204458.2273672, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334162, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2072, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.228367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334163, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 267, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.229367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334164, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1645, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.2303672, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334165, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2030, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.231367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334166, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2390, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } ], "matched": 5 } TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** ok: [sut] => { "ansible_facts": { "crypto_policies_available_policies": [ "DEFAULT", "FUTURE", "EMPTY", "LEGACY", "FIPS" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** ok: [sut] => { "changed": false, "examined": 5, "files": [ { "atime": 1623934914.0, "ctime": 1634204458.232367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359730, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 318, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.233367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359731, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.2343671, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359732, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 90, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.235367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359733, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 123, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.236367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359734, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1910, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } ], "matched": 5 } TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** ok: [sut] => { "ansible_facts": { "crypto_policies_available_subpolicies": [ "ECDHE-ONLY", "NO-CAMELLIA", "AD-SUPPORT", "OSPP", "NO-SHA1" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** ok: [sut] => { "ansible_facts": { "crypto_policies_available_modules": [ "ECDHE-ONLY", "NO-CAMELLIA", "AD-SUPPORT", "OSPP", "NO-SHA1" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.crypto_policies : include_tasks] ********************** included: /WORKDIR/dist-git-crypto_policies-change-recursive-link-to-role-dir-links-dX8VkQ/tests/roles/linux-system-roles.crypto_policies/tasks/gather_facts.yml for sut TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** ok: [sut] => { "changed": false, "cmd": [ "update-crypto-policies", "--show" ], "delta": "0:00:00.067049", "end": "2022-01-04 02:59:50.957077", "rc": 0, "start": "2022-01-04 02:59:50.890028" } STDOUT: DEFAULT TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ ok: [sut] => { "ansible_facts": { "crypto_policies_active": "DEFAULT" }, "changed": false } TASK [Get SSHD pid before policy update] *************************************** ok: [sut] => { "changed": false, "content": "MTA1OAo=", "encoding": "base64", "source": "/var/run/sshd.pid" } TASK [Change policy from DEFAULT TO LEGACY (disable reload)] ******************* TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** skipping: [sut] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat_8.5.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_8.5.yml", "skip_reason": "Conditional result was False" } TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** ok: [sut] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [linux-system-roles.crypto_policies : include_tasks] ********************** included: /WORKDIR/dist-git-crypto_policies-change-recursive-link-to-role-dir-links-dX8VkQ/tests/roles/linux-system-roles.crypto_policies/tasks/gather_facts.yml for sut TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** ok: [sut] => { "changed": false, "cmd": [ "update-crypto-policies", "--show" ], "delta": "0:00:00.065861", "end": "2022-01-04 02:59:54.140866", "rc": 0, "start": "2022-01-04 02:59:54.075005" } STDOUT: DEFAULT TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ ok: [sut] => { "ansible_facts": { "crypto_policies_active": "DEFAULT" }, "changed": false } TASK [linux-system-roles.crypto_policies : Find base policies files] *********** ok: [sut] => { "changed": false, "examined": 7, "files": [ { "atime": 1634204509.975367, "ctime": 1634204458.2273672, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334162, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2072, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.228367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334163, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 267, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.229367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334164, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1645, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.2303672, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334165, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2030, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.231367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334166, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2390, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } ], "matched": 5 } TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** ok: [sut] => { "ansible_facts": { "crypto_policies_available_policies": [ "DEFAULT", "FUTURE", "EMPTY", "LEGACY", "FIPS" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** ok: [sut] => { "changed": false, "examined": 5, "files": [ { "atime": 1623934914.0, "ctime": 1634204458.232367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359730, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 318, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.233367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359731, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.2343671, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359732, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 90, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.235367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359733, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 123, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.236367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359734, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1910, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } ], "matched": 5 } TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** ok: [sut] => { "ansible_facts": { "crypto_policies_available_subpolicies": [ "ECDHE-ONLY", "NO-CAMELLIA", "AD-SUPPORT", "OSPP", "NO-SHA1" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** ok: [sut] => { "ansible_facts": { "crypto_policies_available_modules": [ "ECDHE-ONLY", "NO-CAMELLIA", "AD-SUPPORT", "OSPP", "NO-SHA1" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** changed: [sut] => { "changed": true, "cmd": [ "update-crypto-policies", "--no-reload", "--set", "LEGACY" ], "delta": "0:00:00.192410", "end": "2022-01-04 02:59:55.609550", "rc": 0, "start": "2022-01-04 02:59:55.417140" } STDOUT: Setting system policy to LEGACY Note: System-wide crypto policies are applied on application start-up. It is recommended to restart the system for the change of policies to fully take place. TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** ok: [sut] => { "ansible_facts": { "crypto_policies_reboot_required": true }, "changed": false } TASK [linux-system-roles.crypto_policies : include_tasks] ********************** included: /WORKDIR/dist-git-crypto_policies-change-recursive-link-to-role-dir-links-dX8VkQ/tests/roles/linux-system-roles.crypto_policies/tasks/gather_facts.yml for sut TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** ok: [sut] => { "changed": false, "cmd": [ "update-crypto-policies", "--show" ], "delta": "0:00:00.065974", "end": "2022-01-04 02:59:56.164698", "rc": 0, "start": "2022-01-04 02:59:56.098724" } STDOUT: LEGACY TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ ok: [sut] => { "ansible_facts": { "crypto_policies_active": "LEGACY" }, "changed": false } TASK [Get sshd pid after first update] ***************************************** ok: [sut] => { "changed": false, "content": "MTA1OAo=", "encoding": "base64", "source": "/var/run/sshd.pid" } TASK [Verify that policy was changed to LEGACY] ******************************** ok: [sut] => { "changed": false } MSG: All assertions passed TASK [Check the sshd was not reloaded] ***************************************** ok: [sut] => { "changed": false } MSG: All assertions passed TASK [Change policy from LEGACY to DEFAULT (reload by default)] **************** TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** skipping: [sut] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=RedHat_8.5.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_8.5.yml", "skip_reason": "Conditional result was False" } TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** ok: [sut] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [linux-system-roles.crypto_policies : include_tasks] ********************** included: /WORKDIR/dist-git-crypto_policies-change-recursive-link-to-role-dir-links-dX8VkQ/tests/roles/linux-system-roles.crypto_policies/tasks/gather_facts.yml for sut TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** ok: [sut] => { "changed": false, "cmd": [ "update-crypto-policies", "--show" ], "delta": "0:00:00.066499", "end": "2022-01-04 02:59:58.859114", "rc": 0, "start": "2022-01-04 02:59:58.792615" } STDOUT: LEGACY TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ ok: [sut] => { "ansible_facts": { "crypto_policies_active": "LEGACY" }, "changed": false } TASK [linux-system-roles.crypto_policies : Find base policies files] *********** ok: [sut] => { "changed": false, "examined": 7, "files": [ { "atime": 1634204509.975367, "ctime": 1634204458.2273672, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334162, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2072, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.228367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334163, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 267, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.229367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334164, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1645, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.2303672, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334165, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2030, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1641265195.47833, "ctime": 1634204458.231367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 334166, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2390, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } ], "matched": 5 } TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** ok: [sut] => { "ansible_facts": { "crypto_policies_available_policies": [ "DEFAULT", "FUTURE", "EMPTY", "LEGACY", "FIPS" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** ok: [sut] => { "changed": false, "examined": 5, "files": [ { "atime": 1623934914.0, "ctime": 1634204458.232367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359730, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 318, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.233367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359731, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.2343671, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359732, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 90, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.235367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359733, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 123, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1623934914.0, "ctime": 1634204458.236367, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 3359734, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1623934914.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1910, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } ], "matched": 5 } TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** ok: [sut] => { "ansible_facts": { "crypto_policies_available_subpolicies": [ "ECDHE-ONLY", "NO-CAMELLIA", "AD-SUPPORT", "OSPP", "NO-SHA1" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** ok: [sut] => { "ansible_facts": { "crypto_policies_available_modules": [ "ECDHE-ONLY", "NO-CAMELLIA", "AD-SUPPORT", "OSPP", "NO-SHA1" ] }, "changed": false } TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** changed: [sut] => { "changed": true, "cmd": [ "update-crypto-policies", "--set", "DEFAULT" ], "delta": "0:00:00.182817", "end": "2022-01-04 03:00:00.094696", "rc": 0, "start": "2022-01-04 02:59:59.911879" } STDOUT: Setting system policy to DEFAULT Note: System-wide crypto policies are applied on application start-up. It is recommended to restart the system for the change of policies to fully take place. TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** ok: [sut] => { "ansible_facts": { "crypto_policies_reboot_required": true }, "changed": false } TASK [linux-system-roles.crypto_policies : include_tasks] ********************** included: /WORKDIR/dist-git-crypto_policies-change-recursive-link-to-role-dir-links-dX8VkQ/tests/roles/linux-system-roles.crypto_policies/tasks/gather_facts.yml for sut TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** ok: [sut] => { "changed": false, "cmd": [ "update-crypto-policies", "--show" ], "delta": "0:00:00.066642", "end": "2022-01-04 03:00:00.489415", "rc": 0, "start": "2022-01-04 03:00:00.422773" } STDOUT: DEFAULT TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ ok: [sut] => { "ansible_facts": { "crypto_policies_active": "DEFAULT" }, "changed": false } TASK [Get sshd pid after second update] **************************************** ok: [sut] => { "changed": false, "content": "ODMxMQo=", "encoding": "base64", "source": "/var/run/sshd.pid" } TASK [Verify that policy was changed to DEFAULT] ******************************* ok: [sut] => { "changed": false } MSG: All assertions passed TASK [Check the sshd was reloaded] ********************************************* ok: [sut] => { "changed": false } MSG: All assertions passed RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } PLAY RECAP ********************************************************************* sut : ok=48 changed=2 unreachable=0 failed=0 skipped=11 rescued=0 ignored=0 ---^---^---^---^---^--- # STDERR: ---v---v---v---v---v--- ---^---^---^---^---^---