ansible-playbook [core 2.17.14]
  config file = None
  configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/local/lib/python3.12/site-packages/ansible
  ansible collection location = /tmp/collections-qz8
  executable location = /usr/local/bin/ansible-playbook
  python version = 3.12.12 (main, Mar 27 2026, 00:00:00) [GCC 14.3.1 20251022 (Red Hat 14.3.1-4)] (/usr/bin/python3.12)
  jinja version = 3.1.6
  libyaml = True
No config file found; using defaults
running playbook inside collection fedora.linux_system_roles
Skipping callback 'debug', as we already have a stdout callback.
Skipping callback 'json', as we already have a stdout callback.
Skipping callback 'jsonl', as we already have a stdout callback.
Skipping callback 'default', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.

PLAYBOOK: tests_purge_rules.yml ************************************************
1 plays in /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml

PLAY [Test auditd_purge_rules purge and idempotence] ***************************

TASK [Gathering Facts] *********************************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:5
Wednesday 15 April 2026  14:12:33 -0400 (0:00:00.017)       0:00:00.017 ******* 
[WARNING]: Platform linux on host managed-node1 is using the discovered Python
interpreter at /usr/bin/python3.12, but future installation of another Python
interpreter could change the meaning of that path. See
https://docs.ansible.com/ansible-
core/2.17/reference_appendices/interpreter_discovery.html for more information.
ok: [managed-node1]

TASK [Back up existing auditd configuration and rules metadata] ****************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:13
Wednesday 15 April 2026  14:12:34 -0400 (0:00:01.129)       0:00:01.147 ******* 
included: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml for managed-node1

TASK [Check for existing auditd.conf] ******************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:7
Wednesday 15 April 2026  14:12:34 -0400 (0:00:00.016)       0:00:01.164 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776276736.5833974,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "a93cfc6889d0a3dfd87548eac330576e1146dbe7",
        "ctime": 1776276732.6273527,
        "dev": 51714,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 239075523,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0640",
        "mtime": 1776276732.6277163,
        "nlink": 1,
        "path": "/etc/audit/auditd.conf",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": false,
        "rusr": true,
        "size": 880,
        "uid": 0,
        "version": "4224112973",
        "wgrp": false,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Check for existing custom.rules] *****************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:12
Wednesday 15 April 2026  14:12:34 -0400 (0:00:00.430)       0:00:01.594 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776276735.2433822,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "77d103ccdfd11c4eb539eca7353fba2aed57407c",
        "ctime": 1776276733.7443655,
        "dev": 51714,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 260047045,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0664",
        "mtime": 1776276733.4873626,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 246,
        "uid": 0,
        "version": "676237326",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Remember whether custom.rules existed] ***********************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:17
Wednesday 15 April 2026  14:12:35 -0400 (0:00:00.349)       0:00:01.943 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_integration_had_custom_rules": true
    },
    "changed": false
}

TASK [Back up auditd.conf before test] *****************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:21
Wednesday 15 April 2026  14:12:35 -0400 (0:00:00.014)       0:00:01.958 ******* 
changed: [managed-node1] => {
    "changed": true,
    "checksum": "a93cfc6889d0a3dfd87548eac330576e1146dbe7",
    "dest": "/root/.lsr_auditd_integration_auditd.conf.bak",
    "gid": 0,
    "group": "root",
    "md5sum": "92e833ed88010f0e8de83378e762d4c2",
    "mode": "0640",
    "owner": "root",
    "secontext": "system_u:object_r:admin_home_t:s0",
    "size": 880,
    "src": "/etc/audit/auditd.conf",
    "state": "file",
    "uid": 0
}

TASK [Back up custom.rules before test] ****************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:29
Wednesday 15 April 2026  14:12:35 -0400 (0:00:00.430)       0:00:02.389 ******* 
changed: [managed-node1] => {
    "changed": true,
    "checksum": "77d103ccdfd11c4eb539eca7353fba2aed57407c",
    "dest": "/root/.lsr_auditd_integration_custom.rules.bak",
    "gid": 0,
    "group": "root",
    "md5sum": "399bcfcea7354c0246c8de5866ed19a2",
    "mode": "0664",
    "owner": "root",
    "secontext": "system_u:object_r:admin_home_t:s0",
    "size": 246,
    "src": "/etc/audit/rules.d/custom.rules",
    "state": "file",
    "uid": 0
}

TASK [Record auditd.conf backup path for cleanup] ******************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:37
Wednesday 15 April 2026  14:12:36 -0400 (0:00:00.354)       0:00:02.743 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_integration_backup_auditd_conf": "/root/.lsr_auditd_integration_auditd.conf.bak"
    },
    "changed": false
}

TASK [Record custom.rules backup path for cleanup] *****************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:42
Wednesday 15 April 2026  14:12:36 -0400 (0:00:00.013)       0:00:02.757 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_integration_backup_custom_rules": "/root/.lsr_auditd_integration_custom.rules.bak"
    },
    "changed": false
}

TASK [Ensure rules.d backup parent directory is absent] ************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:16
Wednesday 15 April 2026  14:12:36 -0400 (0:00:00.013)       0:00:02.770 ******* 
ok: [managed-node1] => {
    "changed": false,
    "path": "/root/.lsr_auditd_purge_rulesd.backup",
    "state": "absent"
}

TASK [Create parent directory for rules.d snapshot] ****************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:21
Wednesday 15 April 2026  14:12:36 -0400 (0:00:00.430)       0:00:03.201 ******* 
changed: [managed-node1] => {
    "changed": true,
    "gid": 0,
    "group": "root",
    "mode": "0700",
    "owner": "root",
    "path": "/root/.lsr_auditd_purge_rulesd.backup",
    "secontext": "unconfined_u:object_r:admin_home_t:s0",
    "size": 6,
    "state": "directory",
    "uid": 0
}

TASK [Snapshot rules.d tree for full restore after test] ***********************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:27
Wednesday 15 April 2026  14:12:36 -0400 (0:00:00.351)       0:00:03.552 ******* 
changed: [managed-node1] => {
    "changed": true,
    "checksum": null,
    "dest": "/root/.lsr_auditd_purge_rulesd.backup/",
    "gid": 0,
    "group": "root",
    "md5sum": null,
    "mode": "0750",
    "owner": "root",
    "secontext": "unconfined_u:object_r:admin_home_t:s0",
    "size": 45,
    "src": "/etc/audit/rules.d/",
    "state": "directory",
    "uid": 0
}

TASK [Install decoy rules fragment to be removed by purge] *********************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:34
Wednesday 15 April 2026  14:12:37 -0400 (0:00:00.354)       0:00:03.906 ******* 
changed: [managed-node1] => {
    "changed": true,
    "checksum": "35324fa08aa315fc1ab79570382f077fec44dce9",
    "dest": "/etc/audit/rules.d/99-lsr-purge-decoy.rules",
    "gid": 0,
    "group": "root",
    "md5sum": "f628c72c0861f587eff2d10f92b8e21b",
    "mode": "0644",
    "owner": "root",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 89,
    "src": "/root/.ansible/tmp/ansible-tmp-1776276757.2986677-10682-55015319191102/.source.rules",
    "state": "file",
    "uid": 0
}

TASK [Run auditd role with purge enabled] **************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:42
Wednesday 15 April 2026  14:12:37 -0400 (0:00:00.645)       0:00:04.551 ******* 
included: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml for managed-node1

TASK [Clear facts] *************************************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:9
Wednesday 15 April 2026  14:12:37 -0400 (0:00:00.018)       0:00:04.570 ******* 
META: facts cleared

TASK [Run the role] ************************************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:23
Wednesday 15 April 2026  14:12:37 -0400 (0:00:00.000)       0:00:04.571 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "__sr_failed_when is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Run the role normally] ***************************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:33
Wednesday 15 April 2026  14:12:37 -0400 (0:00:00.014)       0:00:04.585 ******* 
statically imported: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml
included: fedora.linux_system_roles.auditd for managed-node1

TASK [fedora.linux_system_roles.auditd : Validating arguments against arg spec 'main' - Manage auditd and audit rules] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:5
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.088)       0:00:04.674 ******* 
ok: [managed-node1] => {
    "changed": false,
    "validate_args_context": {
        "argument_spec_name": "main",
        "name": "auditd",
        "path": "/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd",
        "type": "role"
    }
}

MSG:

The arg spec validation passed

TASK [fedora.linux_system_roles.auditd : Assert num_logs range (num_logs_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:4
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.015)       0:00:04.689 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert freq range (freq_parser)] ******
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:11
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.016)       0:00:04.705 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert incremental flush requires non-zero freq (sanity_check)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:18
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.015)       0:00:04.721 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert priority_boost range (priority_boost_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:25
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.016)       0:00:04.737 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert q_depth range (q_depth_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:31
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.014)       0:00:04.752 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert max_restarts range (max_restarts_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:38
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.014)       0:00:04.767 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_listen_port range when listener enabled in build (tcp_listen_port_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:44
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.014)       0:00:04.782 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_listen_queue range (tcp_listen_queue_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:50
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.015)       0:00:04.797 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_max_per_addr range (tcp_max_per_addr_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:56
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.015)       0:00:04.813 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_max_idle range (tcp_client_max_idle_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:62
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.014)       0:00:04.827 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_ports format (tcp_client_ports_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:68
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.014)       0:00:04.842 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_ports range order] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:76
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.018)       0:00:04.860 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert space_left_action rejects halt (space_action_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:83
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.018)       0:00:04.879 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert disk_full_action rejects email (disk_full_action_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:89
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.015)       0:00:04.894 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert disk_error_action rejects email and rotate (disk_error_action_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:95
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.014)       0:00:04.909 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert exec companion paths when action is exec] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:101
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.014)       0:00:04.923 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_max_log_file_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert space_left_action exec path] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:108
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.011)       0:00:04.935 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_space_left_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert admin_space_left_action exec path] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:115
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.011)       0:00:04.947 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_admin_space_left_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert disk_full_action exec path] ****
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:122
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.011)       0:00:04.959 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_disk_full_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert disk_error_action exec path] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:129
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.013)       0:00:04.972 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_disk_error_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert name when name_format is user (resolve_node)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:136
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.011)       0:00:04.984 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_name_format | lower == 'user'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert auditd_rules entries] **********
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:143
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.011)       0:00:04.996 ******* 
ok: [managed-node1 -> localhost] => (item=lsr_auditd_purge_test) => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": {
        "file": "/etc/issue",
        "keyname": "lsr_auditd_purge_test",
        "permissions": [
            "read"
        ]
    }
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert syscall rules include required keys] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:153
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.022)       0:00:05.018 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "skipped_reason": "No items in the list"
}

TASK [fedora.linux_system_roles.auditd : Assert permission keys for file rules] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:164
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.016)       0:00:05.034 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Set platform/version specific variables] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:9
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.023)       0:00:05.058 ******* 
included: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml for managed-node1

TASK [fedora.linux_system_roles.auditd : Ensure ansible_facts used by role] ****
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:2
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.025)       0:00:05.084 ******* 
ok: [managed-node1]

TASK [fedora.linux_system_roles.auditd : Check if system is ostree] ************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:10
Wednesday 15 April 2026  14:12:38 -0400 (0:00:00.552)       0:00:05.636 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [fedora.linux_system_roles.auditd : Set flag to indicate system is ostree] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:15
Wednesday 15 April 2026  14:12:39 -0400 (0:00:00.345)       0:00:05.982 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_is_ostree": false
    },
    "changed": false
}

TASK [fedora.linux_system_roles.auditd : Set platform/version specific variables] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:19
Wednesday 15 April 2026  14:12:39 -0400 (0:00:00.019)       0:00:06.001 ******* 
skipping: [managed-node1] => (item=RedHat.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "RedHat.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS_10.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS_10.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS_10.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS_10.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => {
    "changed": false
}

MSG:

All items skipped

TASK [fedora.linux_system_roles.auditd : Resolve package names for OS family] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:34
Wednesday 15 April 2026  14:12:39 -0400 (0:00:00.027)       0:00:06.028 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_packages": [
            "audit"
        ]
    },
    "changed": false
}

TASK [fedora.linux_system_roles.auditd : Install audit packages] ***************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:12
Wednesday 15 April 2026  14:12:39 -0400 (0:00:00.015)       0:00:06.044 ******* 
ok: [managed-node1] => {
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [fedora.linux_system_roles.auditd : Deploy auditd configuration] **********
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:18
Wednesday 15 April 2026  14:12:40 -0400 (0:00:01.226)       0:00:07.271 ******* 
ok: [managed-node1] => {
    "changed": false,
    "checksum": "a93cfc6889d0a3dfd87548eac330576e1146dbe7",
    "dest": "/etc/audit/auditd.conf",
    "gid": 0,
    "group": "root",
    "mode": "0640",
    "owner": "root",
    "path": "/etc/audit/auditd.conf",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 880,
    "state": "file",
    "uid": 0
}

TASK [fedora.linux_system_roles.auditd : Ensure rules.d directory exists] ******
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:25
Wednesday 15 April 2026  14:12:41 -0400 (0:00:00.642)       0:00:07.913 ******* 
ok: [managed-node1] => {
    "changed": false,
    "gid": 0,
    "group": "root",
    "mode": "0750",
    "owner": "root",
    "path": "/etc/audit/rules.d",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 77,
    "state": "directory",
    "uid": 0
}

TASK [fedora.linux_system_roles.auditd : Purge rules.d when requested] *********
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:31
Wednesday 15 April 2026  14:12:41 -0400 (0:00:00.351)       0:00:08.264 ******* 
included: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml for managed-node1

TASK [fedora.linux_system_roles.auditd : Discover files in rules.d] ************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:12
Wednesday 15 April 2026  14:12:41 -0400 (0:00:00.033)       0:00:08.298 ******* 
ok: [managed-node1] => {
    "changed": false,
    "examined": 3,
    "files": [
        {
            "atime": 1776276574.03,
            "ctime": 1776149893.341,
            "dev": 51714,
            "gid": 0,
            "gr_name": "root",
            "inode": 4419619,
            "isblk": false,
            "ischr": false,
            "isdir": false,
            "isfifo": false,
            "isgid": false,
            "islnk": false,
            "isreg": true,
            "issock": false,
            "isuid": false,
            "mode": "0640",
            "mtime": 1767657600.0,
            "nlink": 1,
            "path": "/etc/audit/rules.d/audit.rules",
            "pw_name": "root",
            "rgrp": true,
            "roth": false,
            "rusr": true,
            "size": 244,
            "uid": 0,
            "wgrp": false,
            "woth": false,
            "wusr": true,
            "xgrp": false,
            "xoth": false,
            "xusr": false
        },
        {
            "atime": 1776276735.2433822,
            "ctime": 1776276733.7443655,
            "dev": 51714,
            "gid": 0,
            "gr_name": "root",
            "inode": 260047045,
            "isblk": false,
            "ischr": false,
            "isdir": false,
            "isfifo": false,
            "isgid": false,
            "islnk": false,
            "isreg": true,
            "issock": false,
            "isuid": false,
            "mode": "0664",
            "mtime": 1776276733.4873626,
            "nlink": 1,
            "path": "/etc/audit/rules.d/custom.rules",
            "pw_name": "root",
            "rgrp": true,
            "roth": true,
            "rusr": true,
            "size": 246,
            "uid": 0,
            "wgrp": true,
            "woth": false,
            "wusr": true,
            "xgrp": false,
            "xoth": false,
            "xusr": false
        },
        {
            "atime": 1776276757.8536372,
            "ctime": 1776276757.856821,
            "dev": 51714,
            "gid": 0,
            "gr_name": "root",
            "inode": 465567939,
            "isblk": false,
            "ischr": false,
            "isdir": false,
            "isfifo": false,
            "isgid": false,
            "islnk": false,
            "isreg": true,
            "issock": false,
            "isuid": false,
            "mode": "0644",
            "mtime": 1776276757.5956345,
            "nlink": 1,
            "path": "/etc/audit/rules.d/99-lsr-purge-decoy.rules",
            "pw_name": "root",
            "rgrp": true,
            "roth": true,
            "rusr": true,
            "size": 89,
            "uid": 0,
            "wgrp": false,
            "woth": false,
            "wusr": true,
            "xgrp": false,
            "xoth": false,
            "xusr": false
        }
    ],
    "matched": 3,
    "skipped_paths": {}
}

MSG:

All paths examined

TASK [fedora.linux_system_roles.auditd : Stat existing custom.rules before purge] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:18
Wednesday 15 April 2026  14:12:42 -0400 (0:00:00.437)       0:00:08.736 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776276735.2433822,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "77d103ccdfd11c4eb539eca7353fba2aed57407c",
        "ctime": 1776276733.7443655,
        "dev": 51714,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 260047045,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0664",
        "mtime": 1776276733.4873626,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 246,
        "uid": 0,
        "version": "676237326",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [fedora.linux_system_roles.auditd : Read existing custom.rules for comparison] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:23
Wednesday 15 April 2026  14:12:42 -0400 (0:00:00.361)       0:00:09.097 ******* 
ok: [managed-node1] => {
    "changed": false,
    "content": "IwojIEFuc2libGUgbWFuYWdlZAojCgojIERlbGV0ZSBhbGwgcHJldmlvdXMgcnVsZXMKLUQKIyBTZXQgYnVmZmVyIHNpemUKLWIgMzI3NjgKIyBTZXQgZmFpbHVyZSBiZWhhdmlvcgotZiAxCiMgU2V0IHRoZSBtYXhpbXVtIGFtb3VudCBvZiBtZXNzYWdlcyBwZXIgc2Vjb25kCi1yIDYwCiMgU2V0IGVuYWJsZSBmbGFnICgwPWRpc2FibGUsIDE9ZW5hYmxlLCAyPWxvY2tlZCwgcmVxdWlyZXMgcmVib290IHRvIHVubG9jaykKLWUgMQoK",
    "encoding": "base64",
    "source": "/etc/audit/rules.d/custom.rules"
}

TASK [fedora.linux_system_roles.auditd : Record whether to keep existing custom.rules (managed rules)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:29
Wednesday 15 April 2026  14:12:42 -0400 (0:00:00.420)       0:00:09.517 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_purge_keep_custom_rules": false
    },
    "changed": false
}

TASK [fedora.linux_system_roles.auditd : Remove files from rules.d] ************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:62
Wednesday 15 April 2026  14:12:42 -0400 (0:00:00.041)       0:00:09.559 ******* 
changed: [managed-node1] => (item=/etc/audit/rules.d/audit.rules) => {
    "ansible_loop_var": "item",
    "changed": true,
    "item": {
        "atime": 1776276574.03,
        "ctime": 1776149893.341,
        "dev": 51714,
        "gid": 0,
        "gr_name": "root",
        "inode": 4419619,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mode": "0640",
        "mtime": 1767657600.0,
        "nlink": 1,
        "path": "/etc/audit/rules.d/audit.rules",
        "pw_name": "root",
        "rgrp": true,
        "roth": false,
        "rusr": true,
        "size": 244,
        "uid": 0,
        "wgrp": false,
        "woth": false,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    },
    "path": "/etc/audit/rules.d/audit.rules",
    "state": "absent"
}
changed: [managed-node1] => (item=/etc/audit/rules.d/custom.rules) => {
    "ansible_loop_var": "item",
    "changed": true,
    "item": {
        "atime": 1776276735.2433822,
        "ctime": 1776276733.7443655,
        "dev": 51714,
        "gid": 0,
        "gr_name": "root",
        "inode": 260047045,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mode": "0664",
        "mtime": 1776276733.4873626,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 246,
        "uid": 0,
        "wgrp": true,
        "woth": false,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    },
    "path": "/etc/audit/rules.d/custom.rules",
    "state": "absent"
}
changed: [managed-node1] => (item=/etc/audit/rules.d/99-lsr-purge-decoy.rules) => {
    "ansible_loop_var": "item",
    "changed": true,
    "item": {
        "atime": 1776276757.8536372,
        "ctime": 1776276757.856821,
        "dev": 51714,
        "gid": 0,
        "gr_name": "root",
        "inode": 465567939,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mode": "0644",
        "mtime": 1776276757.5956345,
        "nlink": 1,
        "path": "/etc/audit/rules.d/99-lsr-purge-decoy.rules",
        "pw_name": "root",
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 89,
        "uid": 0,
        "wgrp": false,
        "woth": false,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    },
    "path": "/etc/audit/rules.d/99-lsr-purge-decoy.rules",
    "state": "absent"
}
Notification for handler Run augenrules has been saved.
Notification for handler Run augenrules has been saved.
Notification for handler Run augenrules has been saved.

TASK [fedora.linux_system_roles.auditd : Deploy custom audit rules] ************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:37
Wednesday 15 April 2026  14:12:43 -0400 (0:00:01.036)       0:00:10.595 ******* 
Notification for handler Run augenrules has been saved.
changed: [managed-node1] => {
    "changed": true,
    "checksum": "02d7d6985ada6afea8b705873885e4614f94bfc2",
    "dest": "/etc/audit/rules.d/custom.rules",
    "gid": 0,
    "group": "root",
    "md5sum": "177f245bcc102068cd4ad4608f133bb7",
    "mode": "0664",
    "owner": "root",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 290,
    "src": "/root/.ansible/tmp/ansible-tmp-1776276763.9903452-10845-211219376553090/.source.rules",
    "state": "file",
    "uid": 0
}

TASK [fedora.linux_system_roles.auditd : Start and enable auditd service] ******
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:47
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.683)       0:00:11.278 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_start_service | bool",
    "skip_reason": "Conditional result was False"
}

TASK [Flush handlers after first role run] *************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:54
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.011)       0:00:11.290 ******* 
NOTIFIED HANDLER fedora.linux_system_roles.auditd : Run augenrules for managed-node1
META: triggered running handlers for managed-node1

RUNNING HANDLER [fedora.linux_system_roles.auditd : Run augenrules] ************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/handlers/main.yml:3
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.001)       0:00:11.291 ******* 
NOTIFIED HANDLER fedora.linux_system_roles.auditd : Load audit rules for managed-node1
changed: [managed-node1] => {
    "changed": true,
    "cmd": [
        "augenrules"
    ],
    "delta": "0:00:00.022919",
    "end": "2026-04-15 14:12:45.031795",
    "rc": 0,
    "start": "2026-04-15 14:12:45.008876"
}

RUNNING HANDLER [fedora.linux_system_roles.auditd : Load audit rules] **********
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/handlers/main.yml:9
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.435)       0:00:11.726 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_start_service | bool",
    "skip_reason": "Conditional result was False"
}

TASK [Stat decoy fragment after purge] *****************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:57
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.011)       0:00:11.738 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [Verify decoy rules file was purged] **************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:62
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.337)       0:00:12.075 ******* 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Read custom.rules after purge] *******************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:67
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.013)       0:00:12.089 ******* 
ok: [managed-node1] => {
    "changed": false,
    "content": "IwojIEFuc2libGUgbWFuYWdlZAojCgojIERlbGV0ZSBhbGwgcHJldmlvdXMgcnVsZXMKLUQKIyBTZXQgYnVmZmVyIHNpemUKLWIgMzI3NjgKIyBTZXQgZmFpbHVyZSBiZWhhdmlvcgotZiAxCiMgU2V0IHRoZSBtYXhpbXVtIGFtb3VudCBvZiBtZXNzYWdlcyBwZXIgc2Vjb25kCi1yIDYwCiMgU2V0IGVuYWJsZSBmbGFnICgwPWRpc2FibGUsIDE9ZW5hYmxlLCAyPWxvY2tlZCwgcmVxdWlyZXMgcmVib290IHRvIHVubG9jaykKLWUgMQoKLXcgL2V0Yy9pc3N1ZSAtcCByIC1rIGxzcl9hdWRpdGRfcHVyZ2VfdGVzdAo=",
    "encoding": "base64",
    "source": "/etc/audit/rules.d/custom.rules"
}

TASK [Verify custom.rules reflects role auditd_rules] **************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:72
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.329)       0:00:12.419 ******* 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Capture checksum of custom.rules before second role run] *****************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:80
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.015)       0:00:12.434 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776276765.017718,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "91271669ce4f391b8f8bf98a56beef27a5c8d15d72f8049956fa12373e8b459c",
        "ctime": 1776276764.5833309,
        "dev": 51714,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 578814148,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0664",
        "mtime": 1776276764.3257103,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 290,
        "uid": 0,
        "version": "1580245768",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Run auditd role again with identical purge and rules] ********************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:86
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.349)       0:00:12.784 ******* 
included: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml for managed-node1

TASK [Clear facts] *************************************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:9
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.018)       0:00:12.802 ******* 
META: facts cleared

TASK [Run the role] ************************************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:23
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.000)       0:00:12.803 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "__sr_failed_when is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Run the role normally] ***************************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:33
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.014)       0:00:12.817 ******* 
statically imported: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml
included: fedora.linux_system_roles.auditd for managed-node1

TASK [fedora.linux_system_roles.auditd : Validating arguments against arg spec 'main' - Manage auditd and audit rules] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:5
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.043)       0:00:12.861 ******* 
ok: [managed-node1] => {
    "changed": false,
    "validate_args_context": {
        "argument_spec_name": "main",
        "name": "auditd",
        "path": "/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd",
        "type": "role"
    }
}

MSG:

The arg spec validation passed

TASK [fedora.linux_system_roles.auditd : Assert num_logs range (num_logs_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:4
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.014)       0:00:12.876 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert freq range (freq_parser)] ******
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:11
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.016)       0:00:12.892 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert incremental flush requires non-zero freq (sanity_check)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:18
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.015)       0:00:12.908 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert priority_boost range (priority_boost_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:25
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.016)       0:00:12.924 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert q_depth range (q_depth_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:31
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.015)       0:00:12.940 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert max_restarts range (max_restarts_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:38
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.016)       0:00:12.956 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_listen_port range when listener enabled in build (tcp_listen_port_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:44
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.016)       0:00:12.972 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_listen_queue range (tcp_listen_queue_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:50
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.017)       0:00:12.989 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_max_per_addr range (tcp_max_per_addr_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:56
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.016)       0:00:13.006 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_max_idle range (tcp_client_max_idle_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:62
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.015)       0:00:13.021 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_ports format (tcp_client_ports_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:68
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.016)       0:00:13.038 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_ports range order] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:76
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.018)       0:00:13.057 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert space_left_action rejects halt (space_action_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:83
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.020)       0:00:13.077 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert disk_full_action rejects email (disk_full_action_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:89
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.016)       0:00:13.093 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert disk_error_action rejects email and rotate (disk_error_action_parser)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:95
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.015)       0:00:13.109 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert exec companion paths when action is exec] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:101
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.015)       0:00:13.124 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_max_log_file_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert space_left_action exec path] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:108
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.012)       0:00:13.136 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_space_left_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert admin_space_left_action exec path] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:115
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.012)       0:00:13.149 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_admin_space_left_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert disk_full_action exec path] ****
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:122
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.012)       0:00:13.162 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_disk_full_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert disk_error_action exec path] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:129
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.012)       0:00:13.175 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_disk_error_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert name when name_format is user (resolve_node)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:136
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.012)       0:00:13.187 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_name_format | lower == 'user'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert auditd_rules entries] **********
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:143
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.012)       0:00:13.200 ******* 
ok: [managed-node1 -> localhost] => (item=lsr_auditd_purge_test) => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": {
        "file": "/etc/issue",
        "keyname": "lsr_auditd_purge_test",
        "permissions": [
            "read"
        ]
    }
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert syscall rules include required keys] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:153
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.024)       0:00:13.224 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "skipped_reason": "No items in the list"
}

TASK [fedora.linux_system_roles.auditd : Assert permission keys for file rules] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:164
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.016)       0:00:13.241 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Set platform/version specific variables] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:9
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.023)       0:00:13.265 ******* 
included: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml for managed-node1

TASK [fedora.linux_system_roles.auditd : Ensure ansible_facts used by role] ****
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:2
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.026)       0:00:13.291 ******* 
ok: [managed-node1]

TASK [fedora.linux_system_roles.auditd : Check if system is ostree] ************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:10
Wednesday 15 April 2026  14:12:47 -0400 (0:00:00.550)       0:00:13.842 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "not __auditd_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Set flag to indicate system is ostree] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:15
Wednesday 15 April 2026  14:12:47 -0400 (0:00:00.015)       0:00:13.858 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "not __auditd_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Set platform/version specific variables] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:19
Wednesday 15 April 2026  14:12:47 -0400 (0:00:00.014)       0:00:13.873 ******* 
skipping: [managed-node1] => (item=RedHat.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "RedHat.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS_10.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS_10.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS_10.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS_10.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => {
    "changed": false
}

MSG:

All items skipped

TASK [fedora.linux_system_roles.auditd : Resolve package names for OS family] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:34
Wednesday 15 April 2026  14:12:47 -0400 (0:00:00.027)       0:00:13.900 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_packages": [
            "audit"
        ]
    },
    "changed": false
}

TASK [fedora.linux_system_roles.auditd : Install audit packages] ***************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:12
Wednesday 15 April 2026  14:12:47 -0400 (0:00:00.014)       0:00:13.915 ******* 
ok: [managed-node1] => {
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [fedora.linux_system_roles.auditd : Deploy auditd configuration] **********
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:18
Wednesday 15 April 2026  14:12:48 -0400 (0:00:01.110)       0:00:15.026 ******* 
ok: [managed-node1] => {
    "changed": false,
    "checksum": "a93cfc6889d0a3dfd87548eac330576e1146dbe7",
    "dest": "/etc/audit/auditd.conf",
    "gid": 0,
    "group": "root",
    "mode": "0640",
    "owner": "root",
    "path": "/etc/audit/auditd.conf",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 880,
    "state": "file",
    "uid": 0
}

TASK [fedora.linux_system_roles.auditd : Ensure rules.d directory exists] ******
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:25
Wednesday 15 April 2026  14:12:49 -0400 (0:00:00.637)       0:00:15.663 ******* 
ok: [managed-node1] => {
    "changed": false,
    "gid": 0,
    "group": "root",
    "mode": "0750",
    "owner": "root",
    "path": "/etc/audit/rules.d",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 26,
    "state": "directory",
    "uid": 0
}

TASK [fedora.linux_system_roles.auditd : Purge rules.d when requested] *********
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:31
Wednesday 15 April 2026  14:12:49 -0400 (0:00:00.350)       0:00:16.014 ******* 
included: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml for managed-node1

TASK [fedora.linux_system_roles.auditd : Discover files in rules.d] ************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:12
Wednesday 15 April 2026  14:12:49 -0400 (0:00:00.032)       0:00:16.046 ******* 
ok: [managed-node1] => {
    "changed": false,
    "examined": 1,
    "files": [
        {
            "atime": 1776276765.017718,
            "ctime": 1776276764.5833309,
            "dev": 51714,
            "gid": 0,
            "gr_name": "root",
            "inode": 578814148,
            "isblk": false,
            "ischr": false,
            "isdir": false,
            "isfifo": false,
            "isgid": false,
            "islnk": false,
            "isreg": true,
            "issock": false,
            "isuid": false,
            "mode": "0664",
            "mtime": 1776276764.3257103,
            "nlink": 1,
            "path": "/etc/audit/rules.d/custom.rules",
            "pw_name": "root",
            "rgrp": true,
            "roth": true,
            "rusr": true,
            "size": 290,
            "uid": 0,
            "wgrp": true,
            "woth": false,
            "wusr": true,
            "xgrp": false,
            "xoth": false,
            "xusr": false
        }
    ],
    "matched": 1,
    "skipped_paths": {}
}

MSG:

All paths examined

TASK [fedora.linux_system_roles.auditd : Stat existing custom.rules before purge] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:18
Wednesday 15 April 2026  14:12:49 -0400 (0:00:00.344)       0:00:16.391 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776276765.017718,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "02d7d6985ada6afea8b705873885e4614f94bfc2",
        "ctime": 1776276764.5833309,
        "dev": 51714,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 578814148,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0664",
        "mtime": 1776276764.3257103,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 290,
        "uid": 0,
        "version": "1580245768",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [fedora.linux_system_roles.auditd : Read existing custom.rules for comparison] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:23
Wednesday 15 April 2026  14:12:50 -0400 (0:00:00.357)       0:00:16.748 ******* 
ok: [managed-node1] => {
    "changed": false,
    "content": "IwojIEFuc2libGUgbWFuYWdlZAojCgojIERlbGV0ZSBhbGwgcHJldmlvdXMgcnVsZXMKLUQKIyBTZXQgYnVmZmVyIHNpemUKLWIgMzI3NjgKIyBTZXQgZmFpbHVyZSBiZWhhdmlvcgotZiAxCiMgU2V0IHRoZSBtYXhpbXVtIGFtb3VudCBvZiBtZXNzYWdlcyBwZXIgc2Vjb25kCi1yIDYwCiMgU2V0IGVuYWJsZSBmbGFnICgwPWRpc2FibGUsIDE9ZW5hYmxlLCAyPWxvY2tlZCwgcmVxdWlyZXMgcmVib290IHRvIHVubG9jaykKLWUgMQoKLXcgL2V0Yy9pc3N1ZSAtcCByIC1rIGxzcl9hdWRpdGRfcHVyZ2VfdGVzdAo=",
    "encoding": "base64",
    "source": "/etc/audit/rules.d/custom.rules"
}

TASK [fedora.linux_system_roles.auditd : Record whether to keep existing custom.rules (managed rules)] ***
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:29
Wednesday 15 April 2026  14:12:50 -0400 (0:00:00.346)       0:00:17.095 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_purge_keep_custom_rules": true
    },
    "changed": false
}

TASK [fedora.linux_system_roles.auditd : Remove files from rules.d] ************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:62
Wednesday 15 April 2026  14:12:50 -0400 (0:00:00.042)       0:00:17.138 ******* 
skipping: [managed-node1] => (item=/etc/audit/rules.d/custom.rules)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "not (\n  (item.path | basename == 'custom.rules')\n  and (__auditd_purge_keep_custom_rules | default(false) | bool)\n)",
    "item": {
        "atime": 1776276765.017718,
        "ctime": 1776276764.5833309,
        "dev": 51714,
        "gid": 0,
        "gr_name": "root",
        "inode": 578814148,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mode": "0664",
        "mtime": 1776276764.3257103,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 290,
        "uid": 0,
        "wgrp": true,
        "woth": false,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    },
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => {
    "changed": false
}

MSG:

All items skipped

TASK [fedora.linux_system_roles.auditd : Deploy custom audit rules] ************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:37
Wednesday 15 April 2026  14:12:50 -0400 (0:00:00.018)       0:00:17.157 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "not (__auditd_purge_keep_custom_rules | default(false) | bool)",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Start and enable auditd service] ******
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:47
Wednesday 15 April 2026  14:12:50 -0400 (0:00:00.013)       0:00:17.170 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_start_service | bool",
    "skip_reason": "Conditional result was False"
}

TASK [Flush handlers after second role run] ************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:98
Wednesday 15 April 2026  14:12:50 -0400 (0:00:00.011)       0:00:17.181 ******* 
META: triggered running handlers for managed-node1

TASK [Stat custom.rules after second role run] *********************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:101
Wednesday 15 April 2026  14:12:50 -0400 (0:00:00.000)       0:00:17.182 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776276765.017718,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "91271669ce4f391b8f8bf98a56beef27a5c8d15d72f8049956fa12373e8b459c",
        "ctime": 1776276764.5833309,
        "dev": 51714,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 578814148,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0664",
        "mtime": 1776276764.3257103,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 290,
        "uid": 0,
        "version": "1580245768",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Verify custom.rules unchanged on idempotent second run] ******************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:107
Wednesday 15 April 2026  14:12:50 -0400 (0:00:00.354)       0:00:17.536 ******* 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Stat decoy path after second run] ****************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:116
Wednesday 15 April 2026  14:12:50 -0400 (0:00:00.021)       0:00:17.557 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [Verify decoy did not reappear] *******************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:121
Wednesday 15 April 2026  14:12:51 -0400 (0:00:00.337)       0:00:17.894 ******* 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Check whether purge test rules.d snapshot exists] ************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:127
Wednesday 15 April 2026  14:12:51 -0400 (0:00:00.013)       0:00:17.908 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776276757.2109041,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 0,
        "charset": "binary",
        "ctime": 1776276757.2109041,
        "dev": 51714,
        "device_type": 0,
        "executable": true,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 452985025,
        "isblk": false,
        "ischr": false,
        "isdir": true,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": false,
        "issock": false,
        "isuid": false,
        "mimetype": "inode/directory",
        "mode": "0750",
        "mtime": 1776276757.2107332,
        "nlink": 2,
        "path": "/root/.lsr_auditd_purge_rulesd.backup",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": false,
        "rusr": true,
        "size": 45,
        "uid": 0,
        "version": "2433036279",
        "wgrp": false,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": true,
        "xoth": false,
        "xusr": true
    }
}

TASK [Remove rules.d tree before restoring snapshot] ***************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:135
Wednesday 15 April 2026  14:12:51 -0400 (0:00:00.351)       0:00:18.260 ******* 
changed: [managed-node1] => {
    "changed": true,
    "path": "/etc/audit/rules.d",
    "state": "absent"
}

TASK [Recreate empty rules.d directory] ****************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:140
Wednesday 15 April 2026  14:12:51 -0400 (0:00:00.354)       0:00:18.615 ******* 
changed: [managed-node1] => {
    "changed": true,
    "gid": 0,
    "group": "root",
    "mode": "0750",
    "owner": "root",
    "path": "/etc/audit/rules.d",
    "secontext": "unconfined_u:object_r:auditd_etc_t:s0",
    "size": 6,
    "state": "directory",
    "uid": 0
}

TASK [Copy snapshot back into rules.d] *****************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:146
Wednesday 15 April 2026  14:12:52 -0400 (0:00:00.352)       0:00:18.968 ******* 
changed: [managed-node1] => {
    "changed": true,
    "checksum": null,
    "dest": "/etc/audit/rules.d/",
    "gid": 0,
    "group": "root",
    "md5sum": null,
    "mode": "0750",
    "owner": "root",
    "secontext": "unconfined_u:object_r:auditd_etc_t:s0",
    "size": 45,
    "src": "/root/.lsr_auditd_purge_rulesd.backup/",
    "state": "directory",
    "uid": 0
}

TASK [Remove purge test rules.d snapshot directory on managed host] ************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:153
Wednesday 15 April 2026  14:12:52 -0400 (0:00:00.350)       0:00:19.318 ******* 
changed: [managed-node1] => {
    "changed": true,
    "path": "/root/.lsr_auditd_purge_rulesd.backup",
    "state": "absent"
}

TASK [Restore system state after purge test] ***********************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:159
Wednesday 15 April 2026  14:12:53 -0400 (0:00:00.349)       0:00:19.667 ******* 
included: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml for managed-node1

TASK [Restore auditd.conf from integration test backup] ************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:3
Wednesday 15 April 2026  14:12:53 -0400 (0:00:00.020)       0:00:19.688 ******* 
ok: [managed-node1] => {
    "changed": false,
    "checksum": "a93cfc6889d0a3dfd87548eac330576e1146dbe7",
    "dest": "/etc/audit/auditd.conf",
    "gid": 0,
    "group": "root",
    "md5sum": "92e833ed88010f0e8de83378e762d4c2",
    "mode": "0640",
    "owner": "root",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 880,
    "src": "/root/.lsr_auditd_integration_auditd.conf.bak",
    "state": "file",
    "uid": 0
}

TASK [Remove auditd.conf backup file] ******************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:11
Wednesday 15 April 2026  14:12:53 -0400 (0:00:00.352)       0:00:20.040 ******* 
changed: [managed-node1] => {
    "changed": true,
    "path": "/root/.lsr_auditd_integration_auditd.conf.bak",
    "state": "absent"
}

TASK [Restore custom.rules from integration test backup] ***********************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:17
Wednesday 15 April 2026  14:12:53 -0400 (0:00:00.349)       0:00:20.390 ******* 
ok: [managed-node1] => {
    "changed": false,
    "checksum": "77d103ccdfd11c4eb539eca7353fba2aed57407c",
    "dest": "/etc/audit/rules.d/custom.rules",
    "gid": 0,
    "group": "root",
    "md5sum": "399bcfcea7354c0246c8de5866ed19a2",
    "mode": "0664",
    "owner": "root",
    "secontext": "unconfined_u:object_r:auditd_etc_t:s0",
    "size": 246,
    "src": "/root/.lsr_auditd_integration_custom.rules.bak",
    "state": "file",
    "uid": 0
}

TASK [Remove custom.rules backup file] *****************************************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:25
Wednesday 15 April 2026  14:12:54 -0400 (0:00:00.349)       0:00:20.739 ******* 
changed: [managed-node1] => {
    "changed": true,
    "path": "/root/.lsr_auditd_integration_custom.rules.bak",
    "state": "absent"
}

TASK [Remove custom.rules if it did not exist before test] *********************
task path: /tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:31
Wednesday 15 April 2026  14:12:54 -0400 (0:00:00.353)       0:00:21.093 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "not __auditd_integration_had_custom_rules | bool",
    "skip_reason": "Conditional result was False"
}

PLAY RECAP *********************************************************************
managed-node1              : ok=99   changed=14   unreachable=0    failed=0    skipped=26   rescued=0    ignored=0   

SYSTEM ROLES ERRORS BEGIN v1
[]
SYSTEM ROLES ERRORS END v1

TASKS RECAP ********************************************************************
Wednesday 15 April 2026  14:12:54 -0400 (0:00:00.010)       0:00:21.104 ******* 
=============================================================================== 
fedora.linux_system_roles.auditd : Install audit packages --------------- 1.23s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:12 
Gathering Facts --------------------------------------------------------- 1.13s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:5 
fedora.linux_system_roles.auditd : Install audit packages --------------- 1.11s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:12 
fedora.linux_system_roles.auditd : Remove files from rules.d ------------ 1.04s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:62 
fedora.linux_system_roles.auditd : Deploy custom audit rules ------------ 0.68s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:37 
Install decoy rules fragment to be removed by purge --------------------- 0.65s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:34 
fedora.linux_system_roles.auditd : Deploy auditd configuration ---------- 0.64s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:18 
fedora.linux_system_roles.auditd : Deploy auditd configuration ---------- 0.64s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:18 
fedora.linux_system_roles.auditd : Ensure ansible_facts used by role ---- 0.55s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:2 
fedora.linux_system_roles.auditd : Ensure ansible_facts used by role ---- 0.55s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:2 
fedora.linux_system_roles.auditd : Discover files in rules.d ------------ 0.44s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:12 
fedora.linux_system_roles.auditd : Run augenrules ----------------------- 0.44s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/handlers/main.yml:3 
Ensure rules.d backup parent directory is absent ------------------------ 0.43s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:16 
Check for existing auditd.conf ------------------------------------------ 0.43s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:7 
Back up auditd.conf before test ----------------------------------------- 0.43s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:21 
fedora.linux_system_roles.auditd : Read existing custom.rules for comparison --- 0.42s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:23 
fedora.linux_system_roles.auditd : Stat existing custom.rules before purge --- 0.36s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:18 
fedora.linux_system_roles.auditd : Stat existing custom.rules before purge --- 0.36s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:18 
Remove rules.d tree before restoring snapshot --------------------------- 0.35s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:135 
Stat custom.rules after second role run --------------------------------- 0.35s
/tmp/collections-qz8/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:101