ansible-playbook [core 2.16.18]
  config file = None
  configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/local/lib/python3.12/site-packages/ansible
  ansible collection location = /tmp/collections-rHd
  executable location = /usr/local/bin/ansible-playbook
  python version = 3.12.1 (main, Feb 21 2024, 14:18:26) [GCC 8.5.0 20210514 (Red Hat 8.5.0-21)] (/usr/bin/python3.12)
  jinja version = 3.1.6
  libyaml = True
No config file found; using defaults
running playbook inside collection fedora.linux_system_roles
Skipping callback 'debug', as we already have a stdout callback.
Skipping callback 'json', as we already have a stdout callback.
Skipping callback 'jsonl', as we already have a stdout callback.
Skipping callback 'default', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.

PLAYBOOK: tests_purge_rules.yml ************************************************
1 plays in /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml

PLAY [Test auditd_purge_rules purge and idempotence] ***************************

TASK [Gathering Facts] *********************************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:5
Wednesday 15 April 2026  14:12:40 -0400 (0:00:00.018)       0:00:00.018 ******* 
ok: [managed-node1]

TASK [Back up existing auditd configuration and rules metadata] ****************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:13
Wednesday 15 April 2026  14:12:41 -0400 (0:00:01.065)       0:00:01.083 ******* 
included: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml for managed-node1

TASK [Check for existing auditd.conf] ******************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:7
Wednesday 15 April 2026  14:12:41 -0400 (0:00:00.054)       0:00:01.138 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776276741.432018,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "a93cfc6889d0a3dfd87548eac330576e1146dbe7",
        "ctime": 1776276737.3749828,
        "dev": 51713,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 159383746,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0640",
        "mtime": 1776276737.0079799,
        "nlink": 1,
        "path": "/etc/audit/auditd.conf",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": false,
        "rusr": true,
        "size": 880,
        "uid": 0,
        "version": "1094998898",
        "wgrp": false,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Check for existing custom.rules] *****************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:12
Wednesday 15 April 2026  14:12:41 -0400 (0:00:00.443)       0:00:01.581 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776276740.0790064,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "77d103ccdfd11c4eb539eca7353fba2aed57407c",
        "ctime": 1776276738.545993,
        "dev": 51713,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 169869506,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0664",
        "mtime": 1776276738.2739906,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 246,
        "uid": 0,
        "version": "2400489658",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Remember whether custom.rules existed] ***********************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:17
Wednesday 15 April 2026  14:12:42 -0400 (0:00:00.350)       0:00:01.931 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_integration_had_custom_rules": true
    },
    "changed": false
}

TASK [Back up auditd.conf before test] *****************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:21
Wednesday 15 April 2026  14:12:42 -0400 (0:00:00.013)       0:00:01.945 ******* 
changed: [managed-node1] => {
    "changed": true,
    "checksum": "a93cfc6889d0a3dfd87548eac330576e1146dbe7",
    "dest": "/root/.lsr_auditd_integration_auditd.conf.bak",
    "gid": 0,
    "group": "root",
    "md5sum": "92e833ed88010f0e8de83378e762d4c2",
    "mode": "0640",
    "owner": "root",
    "secontext": "system_u:object_r:admin_home_t:s0",
    "size": 880,
    "src": "/etc/audit/auditd.conf",
    "state": "file",
    "uid": 0
}

TASK [Back up custom.rules before test] ****************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:29
Wednesday 15 April 2026  14:12:42 -0400 (0:00:00.456)       0:00:02.402 ******* 
changed: [managed-node1] => {
    "changed": true,
    "checksum": "77d103ccdfd11c4eb539eca7353fba2aed57407c",
    "dest": "/root/.lsr_auditd_integration_custom.rules.bak",
    "gid": 0,
    "group": "root",
    "md5sum": "399bcfcea7354c0246c8de5866ed19a2",
    "mode": "0664",
    "owner": "root",
    "secontext": "system_u:object_r:admin_home_t:s0",
    "size": 246,
    "src": "/etc/audit/rules.d/custom.rules",
    "state": "file",
    "uid": 0
}

TASK [Record auditd.conf backup path for cleanup] ******************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:37
Wednesday 15 April 2026  14:12:42 -0400 (0:00:00.358)       0:00:02.760 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_integration_backup_auditd_conf": "/root/.lsr_auditd_integration_auditd.conf.bak"
    },
    "changed": false
}

TASK [Record custom.rules backup path for cleanup] *****************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:42
Wednesday 15 April 2026  14:12:42 -0400 (0:00:00.015)       0:00:02.776 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_integration_backup_custom_rules": "/root/.lsr_auditd_integration_custom.rules.bak"
    },
    "changed": false
}

TASK [Ensure rules.d backup parent directory is absent] ************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:16
Wednesday 15 April 2026  14:12:42 -0400 (0:00:00.014)       0:00:02.790 ******* 
ok: [managed-node1] => {
    "changed": false,
    "path": "/root/.lsr_auditd_purge_rulesd.backup",
    "state": "absent"
}

TASK [Create parent directory for rules.d snapshot] ****************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:21
Wednesday 15 April 2026  14:12:43 -0400 (0:00:00.442)       0:00:03.232 ******* 
changed: [managed-node1] => {
    "changed": true,
    "gid": 0,
    "group": "root",
    "mode": "0700",
    "owner": "root",
    "path": "/root/.lsr_auditd_purge_rulesd.backup",
    "secontext": "unconfined_u:object_r:admin_home_t:s0",
    "size": 6,
    "state": "directory",
    "uid": 0
}

TASK [Snapshot rules.d tree for full restore after test] ***********************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:27
Wednesday 15 April 2026  14:12:43 -0400 (0:00:00.351)       0:00:03.584 ******* 
changed: [managed-node1] => {
    "changed": true,
    "checksum": null,
    "dest": "/root/.lsr_auditd_purge_rulesd.backup/",
    "gid": 0,
    "group": "root",
    "md5sum": null,
    "mode": "0750",
    "owner": "root",
    "secontext": "unconfined_u:object_r:admin_home_t:s0",
    "size": 45,
    "src": "/etc/audit/rules.d/",
    "state": "directory",
    "uid": 0
}

TASK [Install decoy rules fragment to be removed by purge] *********************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:34
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.349)       0:00:03.934 ******* 
changed: [managed-node1] => {
    "changed": true,
    "checksum": "35324fa08aa315fc1ab79570382f077fec44dce9",
    "dest": "/etc/audit/rules.d/99-lsr-purge-decoy.rules",
    "gid": 0,
    "group": "root",
    "md5sum": "f628c72c0861f587eff2d10f92b8e21b",
    "mode": "0644",
    "owner": "root",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 89,
    "src": "/root/.ansible/tmp/ansible-tmp-1776276764.0861442-9638-77138698493113/source",
    "state": "file",
    "uid": 0
}

TASK [Run auditd role with purge enabled] **************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:42
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.677)       0:00:04.611 ******* 
included: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml for managed-node1

TASK [Clear facts] *************************************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:9
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.019)       0:00:04.631 ******* 
META: facts cleared

TASK [Run the role] ************************************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:23
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.000)       0:00:04.632 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "__sr_failed_when is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Run the role normally] ***************************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:33
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.015)       0:00:04.647 ******* 
statically imported: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml

TASK [fedora.linux_system_roles.auditd : Validating arguments against arg spec 'main' - Manage auditd and audit rules] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:5
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.088)       0:00:04.736 ******* 
ok: [managed-node1] => {
    "changed": false,
    "validate_args_context": {
        "argument_spec_name": "main",
        "name": "auditd",
        "path": "/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd",
        "type": "role"
    }
}

MSG:

The arg spec validation passed

TASK [fedora.linux_system_roles.auditd : Assert num_logs range (num_logs_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:4
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.015)       0:00:04.752 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert freq range (freq_parser)] ******
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:11
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.016)       0:00:04.769 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert incremental flush requires non-zero freq (sanity_check)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:18
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.017)       0:00:04.786 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert priority_boost range (priority_boost_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:25
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.017)       0:00:04.804 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert q_depth range (q_depth_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:31
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.016)       0:00:04.821 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert max_restarts range (max_restarts_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:38
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.017)       0:00:04.838 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_listen_port range when listener enabled in build (tcp_listen_port_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:44
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.017)       0:00:04.856 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_listen_queue range (tcp_listen_queue_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:50
Wednesday 15 April 2026  14:12:44 -0400 (0:00:00.017)       0:00:04.874 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_max_per_addr range (tcp_max_per_addr_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:56
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.017)       0:00:04.891 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_max_idle range (tcp_client_max_idle_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:62
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.016)       0:00:04.908 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_ports format (tcp_client_ports_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:68
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.016)       0:00:04.925 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_ports range order] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:76
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.020)       0:00:04.946 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert space_left_action rejects halt (space_action_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:83
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.021)       0:00:04.968 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert disk_full_action rejects email (disk_full_action_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:89
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.016)       0:00:04.984 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert disk_error_action rejects email and rotate (disk_error_action_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:95
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.015)       0:00:05.000 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert exec companion paths when action is exec] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:101
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.016)       0:00:05.016 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_max_log_file_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert space_left_action exec path] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:108
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.013)       0:00:05.029 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_space_left_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert admin_space_left_action exec path] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:115
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.013)       0:00:05.042 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_admin_space_left_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert disk_full_action exec path] ****
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:122
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.013)       0:00:05.056 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_disk_full_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert disk_error_action exec path] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:129
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.013)       0:00:05.070 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_disk_error_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert name when name_format is user (resolve_node)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:136
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.013)       0:00:05.084 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_name_format | lower == 'user'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert auditd_rules entries] **********
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:143
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.013)       0:00:05.097 ******* 
ok: [managed-node1 -> localhost] => (item=lsr_auditd_purge_test) => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": {
        "file": "/etc/issue",
        "keyname": "lsr_auditd_purge_test",
        "permissions": [
            "read"
        ]
    }
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert syscall rules include required keys] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:153
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.025)       0:00:05.123 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "skipped_reason": "No items in the list"
}

TASK [fedora.linux_system_roles.auditd : Assert permission keys for file rules] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:164
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.017)       0:00:05.140 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Set platform/version specific variables] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:9
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.026)       0:00:05.166 ******* 
included: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml for managed-node1

TASK [fedora.linux_system_roles.auditd : Ensure ansible_facts used by role] ****
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:2
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.027)       0:00:05.194 ******* 
ok: [managed-node1]

TASK [fedora.linux_system_roles.auditd : Check if system is ostree] ************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:10
Wednesday 15 April 2026  14:12:45 -0400 (0:00:00.576)       0:00:05.771 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [fedora.linux_system_roles.auditd : Set flag to indicate system is ostree] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:15
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.345)       0:00:06.116 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_is_ostree": false
    },
    "changed": false
}

TASK [fedora.linux_system_roles.auditd : Set platform/version specific variables] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:19
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.019)       0:00:06.136 ******* 
skipping: [managed-node1] => (item=RedHat.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "RedHat.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS_8.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS_8.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS_8.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS_8.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => {
    "changed": false
}

MSG:

All items skipped

TASK [fedora.linux_system_roles.auditd : Resolve package names for OS family] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:34
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.029)       0:00:06.166 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_packages": [
            "audit"
        ]
    },
    "changed": false
}

TASK [fedora.linux_system_roles.auditd : Install audit packages] ***************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:12
Wednesday 15 April 2026  14:12:46 -0400 (0:00:00.015)       0:00:06.181 ******* 
ok: [managed-node1] => {
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [fedora.linux_system_roles.auditd : Deploy auditd configuration] **********
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:18
Wednesday 15 April 2026  14:12:49 -0400 (0:00:03.011)       0:00:09.193 ******* 
ok: [managed-node1] => {
    "changed": false,
    "checksum": "a93cfc6889d0a3dfd87548eac330576e1146dbe7",
    "dest": "/etc/audit/auditd.conf",
    "gid": 0,
    "group": "root",
    "mode": "0640",
    "owner": "root",
    "path": "/etc/audit/auditd.conf",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 880,
    "state": "file",
    "uid": 0
}

TASK [fedora.linux_system_roles.auditd : Ensure rules.d directory exists] ******
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:25
Wednesday 15 April 2026  14:12:49 -0400 (0:00:00.634)       0:00:09.827 ******* 
ok: [managed-node1] => {
    "changed": false,
    "gid": 0,
    "group": "root",
    "mode": "0750",
    "owner": "root",
    "path": "/etc/audit/rules.d",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 77,
    "state": "directory",
    "uid": 0
}

TASK [fedora.linux_system_roles.auditd : Purge rules.d when requested] *********
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:31
Wednesday 15 April 2026  14:12:50 -0400 (0:00:00.352)       0:00:10.180 ******* 
included: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml for managed-node1

TASK [fedora.linux_system_roles.auditd : Discover files in rules.d] ************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:12
Wednesday 15 April 2026  14:12:50 -0400 (0:00:00.034)       0:00:10.214 ******* 
ok: [managed-node1] => {
    "changed": false,
    "examined": 3,
    "files": [
        {
            "atime": 1776276546.172,
            "ctime": 1716968741.892,
            "dev": 51713,
            "gid": 0,
            "gr_name": "root",
            "inode": 918330,
            "isblk": false,
            "ischr": false,
            "isdir": false,
            "isfifo": false,
            "isgid": false,
            "islnk": false,
            "isreg": true,
            "issock": false,
            "isuid": false,
            "mode": "0600",
            "mtime": 1716968741.891,
            "nlink": 1,
            "path": "/etc/audit/rules.d/audit.rules",
            "pw_name": "root",
            "rgrp": false,
            "roth": false,
            "rusr": true,
            "size": 244,
            "uid": 0,
            "wgrp": false,
            "woth": false,
            "wusr": true,
            "xgrp": false,
            "xoth": false,
            "xusr": false
        },
        {
            "atime": 1776276740.0790064,
            "ctime": 1776276738.545993,
            "dev": 51713,
            "gid": 0,
            "gr_name": "root",
            "inode": 169869506,
            "isblk": false,
            "ischr": false,
            "isdir": false,
            "isfifo": false,
            "isgid": false,
            "islnk": false,
            "isreg": true,
            "issock": false,
            "isuid": false,
            "mode": "0664",
            "mtime": 1776276738.2739906,
            "nlink": 1,
            "path": "/etc/audit/rules.d/custom.rules",
            "pw_name": "root",
            "rgrp": true,
            "roth": true,
            "rusr": true,
            "size": 246,
            "uid": 0,
            "wgrp": true,
            "woth": false,
            "wusr": true,
            "xgrp": false,
            "xoth": false,
            "xusr": false
        },
        {
            "atime": 1776276764.666254,
            "ctime": 1776276764.6702542,
            "dev": 51713,
            "gid": 0,
            "gr_name": "root",
            "inode": 272629954,
            "isblk": false,
            "ischr": false,
            "isdir": false,
            "isfifo": false,
            "isgid": false,
            "islnk": false,
            "isreg": true,
            "issock": false,
            "isuid": false,
            "mode": "0644",
            "mtime": 1776276764.3962498,
            "nlink": 1,
            "path": "/etc/audit/rules.d/99-lsr-purge-decoy.rules",
            "pw_name": "root",
            "rgrp": true,
            "roth": true,
            "rusr": true,
            "size": 89,
            "uid": 0,
            "wgrp": false,
            "woth": false,
            "wusr": true,
            "xgrp": false,
            "xoth": false,
            "xusr": false
        }
    ],
    "matched": 3,
    "skipped_paths": {}
}

MSG:

All paths examined

TASK [fedora.linux_system_roles.auditd : Stat existing custom.rules before purge] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:18
Wednesday 15 April 2026  14:12:50 -0400 (0:00:00.450)       0:00:10.664 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776276740.0790064,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "77d103ccdfd11c4eb539eca7353fba2aed57407c",
        "ctime": 1776276738.545993,
        "dev": 51713,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 169869506,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0664",
        "mtime": 1776276738.2739906,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 246,
        "uid": 0,
        "version": "2400489658",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [fedora.linux_system_roles.auditd : Read existing custom.rules for comparison] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:23
Wednesday 15 April 2026  14:12:51 -0400 (0:00:00.359)       0:00:11.024 ******* 
ok: [managed-node1] => {
    "changed": false,
    "content": "IwojIEFuc2libGUgbWFuYWdlZAojCgojIERlbGV0ZSBhbGwgcHJldmlvdXMgcnVsZXMKLUQKIyBTZXQgYnVmZmVyIHNpemUKLWIgMzI3NjgKIyBTZXQgZmFpbHVyZSBiZWhhdmlvcgotZiAxCiMgU2V0IHRoZSBtYXhpbXVtIGFtb3VudCBvZiBtZXNzYWdlcyBwZXIgc2Vjb25kCi1yIDYwCiMgU2V0IGVuYWJsZSBmbGFnICgwPWRpc2FibGUsIDE9ZW5hYmxlLCAyPWxvY2tlZCwgcmVxdWlyZXMgcmVib290IHRvIHVubG9jaykKLWUgMQoK",
    "encoding": "base64",
    "source": "/etc/audit/rules.d/custom.rules"
}

TASK [fedora.linux_system_roles.auditd : Record whether to keep existing custom.rules (managed rules)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:29
Wednesday 15 April 2026  14:12:51 -0400 (0:00:00.437)       0:00:11.461 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_purge_keep_custom_rules": false
    },
    "changed": false
}

TASK [fedora.linux_system_roles.auditd : Remove files from rules.d] ************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:62
Wednesday 15 April 2026  14:12:51 -0400 (0:00:00.042)       0:00:11.504 ******* 
changed: [managed-node1] => (item=/etc/audit/rules.d/audit.rules) => {
    "ansible_loop_var": "item",
    "changed": true,
    "item": {
        "atime": 1776276546.172,
        "ctime": 1716968741.892,
        "dev": 51713,
        "gid": 0,
        "gr_name": "root",
        "inode": 918330,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mode": "0600",
        "mtime": 1716968741.891,
        "nlink": 1,
        "path": "/etc/audit/rules.d/audit.rules",
        "pw_name": "root",
        "rgrp": false,
        "roth": false,
        "rusr": true,
        "size": 244,
        "uid": 0,
        "wgrp": false,
        "woth": false,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    },
    "path": "/etc/audit/rules.d/audit.rules",
    "state": "absent"
}
changed: [managed-node1] => (item=/etc/audit/rules.d/custom.rules) => {
    "ansible_loop_var": "item",
    "changed": true,
    "item": {
        "atime": 1776276740.0790064,
        "ctime": 1776276738.545993,
        "dev": 51713,
        "gid": 0,
        "gr_name": "root",
        "inode": 169869506,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mode": "0664",
        "mtime": 1776276738.2739906,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 246,
        "uid": 0,
        "wgrp": true,
        "woth": false,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    },
    "path": "/etc/audit/rules.d/custom.rules",
    "state": "absent"
}
changed: [managed-node1] => (item=/etc/audit/rules.d/99-lsr-purge-decoy.rules) => {
    "ansible_loop_var": "item",
    "changed": true,
    "item": {
        "atime": 1776276764.666254,
        "ctime": 1776276764.6702542,
        "dev": 51713,
        "gid": 0,
        "gr_name": "root",
        "inode": 272629954,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mode": "0644",
        "mtime": 1776276764.3962498,
        "nlink": 1,
        "path": "/etc/audit/rules.d/99-lsr-purge-decoy.rules",
        "pw_name": "root",
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 89,
        "uid": 0,
        "wgrp": false,
        "woth": false,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    },
    "path": "/etc/audit/rules.d/99-lsr-purge-decoy.rules",
    "state": "absent"
}
Notification for handler Run augenrules has been saved.
Notification for handler Run augenrules has been saved.
Notification for handler Run augenrules has been saved.

TASK [fedora.linux_system_roles.auditd : Deploy custom audit rules] ************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:37
Wednesday 15 April 2026  14:12:52 -0400 (0:00:01.029)       0:00:12.533 ******* 
Notification for handler Run augenrules has been saved.
changed: [managed-node1] => {
    "changed": true,
    "checksum": "02d7d6985ada6afea8b705873885e4614f94bfc2",
    "dest": "/etc/audit/rules.d/custom.rules",
    "gid": 0,
    "group": "root",
    "md5sum": "177f245bcc102068cd4ad4608f133bb7",
    "mode": "0664",
    "owner": "root",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 290,
    "src": "/root/.ansible/tmp/ansible-tmp-1776276772.6882527-9807-239586288417892/source",
    "state": "file",
    "uid": 0
}

TASK [fedora.linux_system_roles.auditd : Start and enable auditd service] ******
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:47
Wednesday 15 April 2026  14:12:53 -0400 (0:00:00.698)       0:00:13.231 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_start_service | bool",
    "skip_reason": "Conditional result was False"
}

TASK [Flush handlers after first role run] *************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:54
Wednesday 15 April 2026  14:12:53 -0400 (0:00:00.012)       0:00:13.243 ******* 
NOTIFIED HANDLER fedora.linux_system_roles.auditd : Run augenrules for managed-node1
META: triggered running handlers for managed-node1

RUNNING HANDLER [fedora.linux_system_roles.auditd : Run augenrules] ************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/handlers/main.yml:3
Wednesday 15 April 2026  14:12:53 -0400 (0:00:00.001)       0:00:13.244 ******* 
NOTIFIED HANDLER fedora.linux_system_roles.auditd : Load audit rules for managed-node1
changed: [managed-node1] => {
    "changed": true,
    "cmd": [
        "augenrules"
    ],
    "delta": "0:00:00.019194",
    "end": "2026-04-15 14:12:53.772970",
    "rc": 0,
    "start": "2026-04-15 14:12:53.753776"
}

RUNNING HANDLER [fedora.linux_system_roles.auditd : Load audit rules] **********
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/handlers/main.yml:9
Wednesday 15 April 2026  14:12:53 -0400 (0:00:00.461)       0:00:13.706 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_start_service | bool",
    "skip_reason": "Conditional result was False"
}

TASK [Stat decoy fragment after purge] *****************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:57
Wednesday 15 April 2026  14:12:53 -0400 (0:00:00.012)       0:00:13.719 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [Verify decoy rules file was purged] **************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:62
Wednesday 15 April 2026  14:12:54 -0400 (0:00:00.344)       0:00:14.064 ******* 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Read custom.rules after purge] *******************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:67
Wednesday 15 April 2026  14:12:54 -0400 (0:00:00.014)       0:00:14.078 ******* 
ok: [managed-node1] => {
    "changed": false,
    "content": "IwojIEFuc2libGUgbWFuYWdlZAojCgojIERlbGV0ZSBhbGwgcHJldmlvdXMgcnVsZXMKLUQKIyBTZXQgYnVmZmVyIHNpemUKLWIgMzI3NjgKIyBTZXQgZmFpbHVyZSBiZWhhdmlvcgotZiAxCiMgU2V0IHRoZSBtYXhpbXVtIGFtb3VudCBvZiBtZXNzYWdlcyBwZXIgc2Vjb25kCi1yIDYwCiMgU2V0IGVuYWJsZSBmbGFnICgwPWRpc2FibGUsIDE9ZW5hYmxlLCAyPWxvY2tlZCwgcmVxdWlyZXMgcmVib290IHRvIHVubG9jaykKLWUgMQoKLXcgL2V0Yy9pc3N1ZSAtcCByIC1rIGxzcl9hdWRpdGRfcHVyZ2VfdGVzdAo=",
    "encoding": "base64",
    "source": "/etc/audit/rules.d/custom.rules"
}

TASK [Verify custom.rules reflects role auditd_rules] **************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:72
Wednesday 15 April 2026  14:12:54 -0400 (0:00:00.336)       0:00:14.414 ******* 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Capture checksum of custom.rules before second role run] *****************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:80
Wednesday 15 April 2026  14:12:54 -0400 (0:00:00.016)       0:00:14.431 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776276773.7614014,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "91271669ce4f391b8f8bf98a56beef27a5c8d15d72f8049956fa12373e8b459c",
        "ctime": 1776276773.2963939,
        "dev": 51713,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 329252997,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0664",
        "mtime": 1776276773.0233896,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 290,
        "uid": 0,
        "version": "3579061231",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Run auditd role again with identical purge and rules] ********************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:86
Wednesday 15 April 2026  14:12:54 -0400 (0:00:00.351)       0:00:14.783 ******* 
included: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml for managed-node1

TASK [Clear facts] *************************************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:9
Wednesday 15 April 2026  14:12:54 -0400 (0:00:00.018)       0:00:14.801 ******* 
META: facts cleared

TASK [Run the role] ************************************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:23
Wednesday 15 April 2026  14:12:54 -0400 (0:00:00.000)       0:00:14.802 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "__sr_failed_when is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Run the role normally] ***************************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:33
Wednesday 15 April 2026  14:12:54 -0400 (0:00:00.015)       0:00:14.817 ******* 
statically imported: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml

TASK [fedora.linux_system_roles.auditd : Validating arguments against arg spec 'main' - Manage auditd and audit rules] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:5
Wednesday 15 April 2026  14:12:54 -0400 (0:00:00.046)       0:00:14.864 ******* 
ok: [managed-node1] => {
    "changed": false,
    "validate_args_context": {
        "argument_spec_name": "main",
        "name": "auditd",
        "path": "/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd",
        "type": "role"
    }
}

MSG:

The arg spec validation passed

TASK [fedora.linux_system_roles.auditd : Assert num_logs range (num_logs_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:4
Wednesday 15 April 2026  14:12:54 -0400 (0:00:00.015)       0:00:14.879 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert freq range (freq_parser)] ******
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:11
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.018)       0:00:14.898 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert incremental flush requires non-zero freq (sanity_check)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:18
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.017)       0:00:14.916 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert priority_boost range (priority_boost_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:25
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.017)       0:00:14.934 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert q_depth range (q_depth_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:31
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.017)       0:00:14.952 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert max_restarts range (max_restarts_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:38
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.019)       0:00:14.971 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_listen_port range when listener enabled in build (tcp_listen_port_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:44
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.018)       0:00:14.990 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_listen_queue range (tcp_listen_queue_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:50
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.020)       0:00:15.010 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_max_per_addr range (tcp_max_per_addr_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:56
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.017)       0:00:15.027 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_max_idle range (tcp_client_max_idle_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:62
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.017)       0:00:15.045 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_ports format (tcp_client_ports_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:68
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.018)       0:00:15.063 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_ports range order] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:76
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.021)       0:00:15.085 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert space_left_action rejects halt (space_action_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:83
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.022)       0:00:15.107 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert disk_full_action rejects email (disk_full_action_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:89
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.018)       0:00:15.125 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert disk_error_action rejects email and rotate (disk_error_action_parser)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:95
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.015)       0:00:15.141 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert exec companion paths when action is exec] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:101
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.016)       0:00:15.157 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_max_log_file_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert space_left_action exec path] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:108
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.013)       0:00:15.171 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_space_left_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert admin_space_left_action exec path] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:115
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.013)       0:00:15.185 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_admin_space_left_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert disk_full_action exec path] ****
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:122
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.013)       0:00:15.199 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_disk_full_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert disk_error_action exec path] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:129
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.014)       0:00:15.213 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_disk_error_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert name when name_format is user (resolve_node)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:136
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.013)       0:00:15.227 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_name_format | lower == 'user'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert auditd_rules entries] **********
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:143
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.013)       0:00:15.240 ******* 
ok: [managed-node1 -> localhost] => (item=lsr_auditd_purge_test) => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": {
        "file": "/etc/issue",
        "keyname": "lsr_auditd_purge_test",
        "permissions": [
            "read"
        ]
    }
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert syscall rules include required keys] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:153
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.026)       0:00:15.266 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "skipped_reason": "No items in the list"
}

TASK [fedora.linux_system_roles.auditd : Assert permission keys for file rules] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert.yml:164
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.016)       0:00:15.283 ******* 
ok: [managed-node1 -> localhost] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Set platform/version specific variables] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:9
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.025)       0:00:15.309 ******* 
included: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml for managed-node1

TASK [fedora.linux_system_roles.auditd : Ensure ansible_facts used by role] ****
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:2
Wednesday 15 April 2026  14:12:55 -0400 (0:00:00.027)       0:00:15.336 ******* 
ok: [managed-node1]

TASK [fedora.linux_system_roles.auditd : Check if system is ostree] ************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:10
Wednesday 15 April 2026  14:12:56 -0400 (0:00:00.553)       0:00:15.890 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "not __auditd_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Set flag to indicate system is ostree] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:15
Wednesday 15 April 2026  14:12:56 -0400 (0:00:00.016)       0:00:15.907 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "not __auditd_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Set platform/version specific variables] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:19
Wednesday 15 April 2026  14:12:56 -0400 (0:00:00.016)       0:00:15.923 ******* 
skipping: [managed-node1] => (item=RedHat.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "RedHat.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS_8.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS_8.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS_8.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS_8.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => {
    "changed": false
}

MSG:

All items skipped

TASK [fedora.linux_system_roles.auditd : Resolve package names for OS family] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:34
Wednesday 15 April 2026  14:12:56 -0400 (0:00:00.029)       0:00:15.953 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_packages": [
            "audit"
        ]
    },
    "changed": false
}

TASK [fedora.linux_system_roles.auditd : Install audit packages] ***************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:12
Wednesday 15 April 2026  14:12:56 -0400 (0:00:00.015)       0:00:15.969 ******* 
ok: [managed-node1] => {
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [fedora.linux_system_roles.auditd : Deploy auditd configuration] **********
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:18
Wednesday 15 April 2026  14:12:58 -0400 (0:00:02.893)       0:00:18.863 ******* 
ok: [managed-node1] => {
    "changed": false,
    "checksum": "a93cfc6889d0a3dfd87548eac330576e1146dbe7",
    "dest": "/etc/audit/auditd.conf",
    "gid": 0,
    "group": "root",
    "mode": "0640",
    "owner": "root",
    "path": "/etc/audit/auditd.conf",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 880,
    "state": "file",
    "uid": 0
}

TASK [fedora.linux_system_roles.auditd : Ensure rules.d directory exists] ******
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:25
Wednesday 15 April 2026  14:12:59 -0400 (0:00:00.650)       0:00:19.513 ******* 
ok: [managed-node1] => {
    "changed": false,
    "gid": 0,
    "group": "root",
    "mode": "0750",
    "owner": "root",
    "path": "/etc/audit/rules.d",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 26,
    "state": "directory",
    "uid": 0
}

TASK [fedora.linux_system_roles.auditd : Purge rules.d when requested] *********
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:31
Wednesday 15 April 2026  14:12:59 -0400 (0:00:00.354)       0:00:19.868 ******* 
included: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml for managed-node1

TASK [fedora.linux_system_roles.auditd : Discover files in rules.d] ************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:12
Wednesday 15 April 2026  14:13:00 -0400 (0:00:00.035)       0:00:19.903 ******* 
ok: [managed-node1] => {
    "changed": false,
    "examined": 1,
    "files": [
        {
            "atime": 1776276773.7614014,
            "ctime": 1776276773.2963939,
            "dev": 51713,
            "gid": 0,
            "gr_name": "root",
            "inode": 329252997,
            "isblk": false,
            "ischr": false,
            "isdir": false,
            "isfifo": false,
            "isgid": false,
            "islnk": false,
            "isreg": true,
            "issock": false,
            "isuid": false,
            "mode": "0664",
            "mtime": 1776276773.0233896,
            "nlink": 1,
            "path": "/etc/audit/rules.d/custom.rules",
            "pw_name": "root",
            "rgrp": true,
            "roth": true,
            "rusr": true,
            "size": 290,
            "uid": 0,
            "wgrp": true,
            "woth": false,
            "wusr": true,
            "xgrp": false,
            "xoth": false,
            "xusr": false
        }
    ],
    "matched": 1,
    "skipped_paths": {}
}

MSG:

All paths examined

TASK [fedora.linux_system_roles.auditd : Stat existing custom.rules before purge] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:18
Wednesday 15 April 2026  14:13:00 -0400 (0:00:00.346)       0:00:20.250 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776276773.7614014,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "02d7d6985ada6afea8b705873885e4614f94bfc2",
        "ctime": 1776276773.2963939,
        "dev": 51713,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 329252997,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0664",
        "mtime": 1776276773.0233896,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 290,
        "uid": 0,
        "version": "3579061231",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [fedora.linux_system_roles.auditd : Read existing custom.rules for comparison] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:23
Wednesday 15 April 2026  14:13:00 -0400 (0:00:00.356)       0:00:20.606 ******* 
ok: [managed-node1] => {
    "changed": false,
    "content": "IwojIEFuc2libGUgbWFuYWdlZAojCgojIERlbGV0ZSBhbGwgcHJldmlvdXMgcnVsZXMKLUQKIyBTZXQgYnVmZmVyIHNpemUKLWIgMzI3NjgKIyBTZXQgZmFpbHVyZSBiZWhhdmlvcgotZiAxCiMgU2V0IHRoZSBtYXhpbXVtIGFtb3VudCBvZiBtZXNzYWdlcyBwZXIgc2Vjb25kCi1yIDYwCiMgU2V0IGVuYWJsZSBmbGFnICgwPWRpc2FibGUsIDE9ZW5hYmxlLCAyPWxvY2tlZCwgcmVxdWlyZXMgcmVib290IHRvIHVubG9jaykKLWUgMQoKLXcgL2V0Yy9pc3N1ZSAtcCByIC1rIGxzcl9hdWRpdGRfcHVyZ2VfdGVzdAo=",
    "encoding": "base64",
    "source": "/etc/audit/rules.d/custom.rules"
}

TASK [fedora.linux_system_roles.auditd : Record whether to keep existing custom.rules (managed rules)] ***
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:29
Wednesday 15 April 2026  14:13:01 -0400 (0:00:00.343)       0:00:20.950 ******* 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_purge_keep_custom_rules": true
    },
    "changed": false
}

TASK [fedora.linux_system_roles.auditd : Remove files from rules.d] ************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:62
Wednesday 15 April 2026  14:13:01 -0400 (0:00:00.043)       0:00:20.993 ******* 
skipping: [managed-node1] => (item=/etc/audit/rules.d/custom.rules)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "not (\n  (item.path | basename == 'custom.rules')\n  and (__auditd_purge_keep_custom_rules | default(false) | bool)\n)",
    "item": {
        "atime": 1776276773.7614014,
        "ctime": 1776276773.2963939,
        "dev": 51713,
        "gid": 0,
        "gr_name": "root",
        "inode": 329252997,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mode": "0664",
        "mtime": 1776276773.0233896,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 290,
        "uid": 0,
        "wgrp": true,
        "woth": false,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    },
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => {
    "changed": false
}

MSG:

All items skipped

TASK [fedora.linux_system_roles.auditd : Deploy custom audit rules] ************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:37
Wednesday 15 April 2026  14:13:01 -0400 (0:00:00.018)       0:00:21.012 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "not (__auditd_purge_keep_custom_rules | default(false) | bool)",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Start and enable auditd service] ******
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:47
Wednesday 15 April 2026  14:13:01 -0400 (0:00:00.014)       0:00:21.027 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_start_service | bool",
    "skip_reason": "Conditional result was False"
}

TASK [Flush handlers after second role run] ************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:98
Wednesday 15 April 2026  14:13:01 -0400 (0:00:00.012)       0:00:21.040 ******* 
META: triggered running handlers for managed-node1

TASK [Stat custom.rules after second role run] *********************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:101
Wednesday 15 April 2026  14:13:01 -0400 (0:00:00.000)       0:00:21.040 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776276773.7614014,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "91271669ce4f391b8f8bf98a56beef27a5c8d15d72f8049956fa12373e8b459c",
        "ctime": 1776276773.2963939,
        "dev": 51713,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 329252997,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0664",
        "mtime": 1776276773.0233896,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 290,
        "uid": 0,
        "version": "3579061231",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Verify custom.rules unchanged on idempotent second run] ******************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:107
Wednesday 15 April 2026  14:13:01 -0400 (0:00:00.351)       0:00:21.391 ******* 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Stat decoy path after second run] ****************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:116
Wednesday 15 April 2026  14:13:01 -0400 (0:00:00.021)       0:00:21.413 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [Verify decoy did not reappear] *******************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:121
Wednesday 15 April 2026  14:13:01 -0400 (0:00:00.335)       0:00:21.749 ******* 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Check whether purge test rules.d snapshot exists] ************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:127
Wednesday 15 April 2026  14:13:01 -0400 (0:00:00.014)       0:00:21.763 ******* 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776276763.9962432,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 0,
        "charset": "binary",
        "ctime": 1776276763.9992433,
        "dev": 51713,
        "device_type": 0,
        "executable": true,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 266338496,
        "isblk": false,
        "ischr": false,
        "isdir": true,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": false,
        "issock": false,
        "isuid": false,
        "mimetype": "inode/directory",
        "mode": "0750",
        "mtime": 1776276763.9962432,
        "nlink": 2,
        "path": "/root/.lsr_auditd_purge_rulesd.backup",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": false,
        "rusr": true,
        "size": 45,
        "uid": 0,
        "version": "4147178054",
        "wgrp": false,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": true,
        "xoth": false,
        "xusr": true
    }
}

TASK [Remove rules.d tree before restoring snapshot] ***************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:135
Wednesday 15 April 2026  14:13:02 -0400 (0:00:00.351)       0:00:22.114 ******* 
changed: [managed-node1] => {
    "changed": true,
    "path": "/etc/audit/rules.d",
    "state": "absent"
}

TASK [Recreate empty rules.d directory] ****************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:140
Wednesday 15 April 2026  14:13:02 -0400 (0:00:00.354)       0:00:22.469 ******* 
changed: [managed-node1] => {
    "changed": true,
    "gid": 0,
    "group": "root",
    "mode": "0750",
    "owner": "root",
    "path": "/etc/audit/rules.d",
    "secontext": "unconfined_u:object_r:auditd_etc_t:s0",
    "size": 6,
    "state": "directory",
    "uid": 0
}

TASK [Copy snapshot back into rules.d] *****************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:146
Wednesday 15 April 2026  14:13:02 -0400 (0:00:00.360)       0:00:22.829 ******* 
changed: [managed-node1] => {
    "changed": true,
    "checksum": null,
    "dest": "/etc/audit/rules.d/",
    "gid": 0,
    "group": "root",
    "md5sum": null,
    "mode": "0750",
    "owner": "root",
    "secontext": "unconfined_u:object_r:auditd_etc_t:s0",
    "size": 45,
    "src": "/root/.lsr_auditd_purge_rulesd.backup/",
    "state": "directory",
    "uid": 0
}

TASK [Remove purge test rules.d snapshot directory on managed host] ************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:153
Wednesday 15 April 2026  14:13:03 -0400 (0:00:00.354)       0:00:23.184 ******* 
changed: [managed-node1] => {
    "changed": true,
    "path": "/root/.lsr_auditd_purge_rulesd.backup",
    "state": "absent"
}

TASK [Restore system state after purge test] ***********************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:159
Wednesday 15 April 2026  14:13:03 -0400 (0:00:00.351)       0:00:23.536 ******* 
included: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml for managed-node1

TASK [Restore auditd.conf from integration test backup] ************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:3
Wednesday 15 April 2026  14:13:03 -0400 (0:00:00.021)       0:00:23.557 ******* 
ok: [managed-node1] => {
    "changed": false,
    "checksum": "a93cfc6889d0a3dfd87548eac330576e1146dbe7",
    "dest": "/etc/audit/auditd.conf",
    "gid": 0,
    "group": "root",
    "md5sum": "92e833ed88010f0e8de83378e762d4c2",
    "mode": "0640",
    "owner": "root",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 880,
    "src": "/root/.lsr_auditd_integration_auditd.conf.bak",
    "state": "file",
    "uid": 0
}

TASK [Remove auditd.conf backup file] ******************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:11
Wednesday 15 April 2026  14:13:04 -0400 (0:00:00.359)       0:00:23.916 ******* 
changed: [managed-node1] => {
    "changed": true,
    "path": "/root/.lsr_auditd_integration_auditd.conf.bak",
    "state": "absent"
}

TASK [Restore custom.rules from integration test backup] ***********************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:17
Wednesday 15 April 2026  14:13:04 -0400 (0:00:00.355)       0:00:24.272 ******* 
ok: [managed-node1] => {
    "changed": false,
    "checksum": "77d103ccdfd11c4eb539eca7353fba2aed57407c",
    "dest": "/etc/audit/rules.d/custom.rules",
    "gid": 0,
    "group": "root",
    "md5sum": "399bcfcea7354c0246c8de5866ed19a2",
    "mode": "0664",
    "owner": "root",
    "secontext": "unconfined_u:object_r:auditd_etc_t:s0",
    "size": 246,
    "src": "/root/.lsr_auditd_integration_custom.rules.bak",
    "state": "file",
    "uid": 0
}

TASK [Remove custom.rules backup file] *****************************************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:25
Wednesday 15 April 2026  14:13:04 -0400 (0:00:00.350)       0:00:24.622 ******* 
changed: [managed-node1] => {
    "changed": true,
    "path": "/root/.lsr_auditd_integration_custom.rules.bak",
    "state": "absent"
}

TASK [Remove custom.rules if it did not exist before test] *********************
task path: /tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:31
Wednesday 15 April 2026  14:13:05 -0400 (0:00:00.350)       0:00:24.973 ******* 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "not __auditd_integration_had_custom_rules | bool",
    "skip_reason": "Conditional result was False"
}

PLAY RECAP *********************************************************************
managed-node1              : ok=97   changed=14   unreachable=0    failed=0    skipped=26   rescued=0    ignored=0   

SYSTEM ROLES ERRORS BEGIN v1
[]
SYSTEM ROLES ERRORS END v1

TASKS RECAP ********************************************************************
Wednesday 15 April 2026  14:13:05 -0400 (0:00:00.012)       0:00:24.985 ******* 
=============================================================================== 
fedora.linux_system_roles.auditd : Install audit packages --------------- 3.01s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:12 
fedora.linux_system_roles.auditd : Install audit packages --------------- 2.89s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:12 
Gathering Facts --------------------------------------------------------- 1.07s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:5 
fedora.linux_system_roles.auditd : Remove files from rules.d ------------ 1.03s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:62 
fedora.linux_system_roles.auditd : Deploy custom audit rules ------------ 0.70s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:37 
Install decoy rules fragment to be removed by purge --------------------- 0.68s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:34 
fedora.linux_system_roles.auditd : Deploy auditd configuration ---------- 0.65s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:18 
fedora.linux_system_roles.auditd : Deploy auditd configuration ---------- 0.63s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:18 
fedora.linux_system_roles.auditd : Ensure ansible_facts used by role ---- 0.58s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:2 
fedora.linux_system_roles.auditd : Ensure ansible_facts used by role ---- 0.55s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:2 
fedora.linux_system_roles.auditd : Run augenrules ----------------------- 0.46s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/handlers/main.yml:3 
Back up auditd.conf before test ----------------------------------------- 0.46s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:21 
fedora.linux_system_roles.auditd : Discover files in rules.d ------------ 0.45s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:12 
Check for existing auditd.conf ------------------------------------------ 0.44s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:7 
Ensure rules.d backup parent directory is absent ------------------------ 0.44s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:16 
fedora.linux_system_roles.auditd : Read existing custom.rules for comparison --- 0.44s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:23 
Recreate empty rules.d directory ---------------------------------------- 0.36s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:140 
fedora.linux_system_roles.auditd : Stat existing custom.rules before purge --- 0.36s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:18 
Restore auditd.conf from integration test backup ------------------------ 0.36s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:3 
Back up custom.rules before test ---------------------------------------- 0.36s
/tmp/collections-rHd/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:29