ansible-playbook [core 2.17.14]
  config file = None
  configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/local/lib/python3.12/site-packages/ansible
  ansible collection location = /tmp/collections-EwS
  executable location = /usr/local/bin/ansible-playbook
  python version = 3.12.12 (main, Mar  9 2026, 00:00:00) [GCC 11.5.0 20240719 (Red Hat 11.5.0-14)] (/usr/bin/python3.12)
  jinja version = 3.1.6
  libyaml = True
No config file found; using defaults
running playbook inside collection fedora.linux_system_roles
Skipping callback 'debug', as we already have a stdout callback.
Skipping callback 'json', as we already have a stdout callback.
Skipping callback 'jsonl', as we already have a stdout callback.
Skipping callback 'default', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.

PLAYBOOK: tests_purge_rules.yml ************************************************
1 plays in /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml

PLAY [Test auditd_purge_rules purge and idempotence] ***************************

TASK [Gathering Facts] *********************************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:5
Friday 17 April 2026  17:28:10 -0400 (0:00:00.018)       0:00:00.018 ********** 
[WARNING]: Platform linux on host managed-node1 is using the discovered Python
interpreter at /usr/bin/python3.9, but future installation of another Python
interpreter could change the meaning of that path. See
https://docs.ansible.com/ansible-
core/2.17/reference_appendices/interpreter_discovery.html for more information.
ok: [managed-node1]

TASK [Back up existing auditd configuration and rules metadata] ****************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:13
Friday 17 April 2026  17:28:11 -0400 (0:00:01.025)       0:00:01.043 ********** 
included: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml for managed-node1

TASK [Check for existing auditd.conf] ******************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:7
Friday 17 April 2026  17:28:11 -0400 (0:00:00.017)       0:00:01.060 ********** 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776461271.156026,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "33eefb6af1c751110a125b8b468118e6f0edb244",
        "ctime": 1776461267.3110406,
        "dev": 51713,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 243269827,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0640",
        "mtime": 1776461267.3119638,
        "nlink": 1,
        "path": "/etc/audit/auditd.conf",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": false,
        "rusr": true,
        "size": 852,
        "uid": 0,
        "version": "2523591884",
        "wgrp": false,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Check for existing custom.rules] *****************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:12
Friday 17 April 2026  17:28:12 -0400 (0:00:00.420)       0:00:01.481 ********** 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776461269.872031,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "69008de23bc363984514521ddc3cd86619715c09",
        "ctime": 1776461268.4230366,
        "dev": 51713,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 264241348,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0664",
        "mtime": 1776461268.1720374,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 268,
        "uid": 0,
        "version": "243912750",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Remember whether custom.rules existed] ***********************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:17
Friday 17 April 2026  17:28:12 -0400 (0:00:00.336)       0:00:01.817 ********** 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_integration_had_custom_rules": true
    },
    "changed": false
}

TASK [Back up auditd.conf before test] *****************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:21
Friday 17 April 2026  17:28:12 -0400 (0:00:00.014)       0:00:01.832 ********** 
changed: [managed-node1] => {
    "changed": true,
    "checksum": "33eefb6af1c751110a125b8b468118e6f0edb244",
    "dest": "/root/.lsr_auditd_integration_auditd.conf.bak",
    "gid": 0,
    "group": "root",
    "md5sum": "eda8c45ce09c30766469af2714e2eff9",
    "mode": "0640",
    "owner": "root",
    "secontext": "system_u:object_r:admin_home_t:s0",
    "size": 852,
    "src": "/etc/audit/auditd.conf",
    "state": "file",
    "uid": 0
}

TASK [Back up custom.rules before test] ****************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:29
Friday 17 April 2026  17:28:13 -0400 (0:00:00.425)       0:00:02.257 ********** 
changed: [managed-node1] => {
    "changed": true,
    "checksum": "69008de23bc363984514521ddc3cd86619715c09",
    "dest": "/root/.lsr_auditd_integration_custom.rules.bak",
    "gid": 0,
    "group": "root",
    "md5sum": "e3743c173f2e0ea45fbb3aa9853a278e",
    "mode": "0664",
    "owner": "root",
    "secontext": "system_u:object_r:admin_home_t:s0",
    "size": 268,
    "src": "/etc/audit/rules.d/custom.rules",
    "state": "file",
    "uid": 0
}

TASK [Record auditd.conf backup path for cleanup] ******************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:37
Friday 17 April 2026  17:28:13 -0400 (0:00:00.335)       0:00:02.593 ********** 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_integration_backup_auditd_conf": "/root/.lsr_auditd_integration_auditd.conf.bak"
    },
    "changed": false
}

TASK [Record custom.rules backup path for cleanup] *****************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:42
Friday 17 April 2026  17:28:13 -0400 (0:00:00.014)       0:00:02.607 ********** 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_integration_backup_custom_rules": "/root/.lsr_auditd_integration_custom.rules.bak"
    },
    "changed": false
}

TASK [Ensure rules.d backup parent directory is absent] ************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:16
Friday 17 April 2026  17:28:13 -0400 (0:00:00.014)       0:00:02.621 ********** 
ok: [managed-node1] => {
    "changed": false,
    "path": "/root/.lsr_auditd_purge_rulesd.backup",
    "state": "absent"
}

TASK [Create parent directory for rules.d snapshot] ****************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:21
Friday 17 April 2026  17:28:13 -0400 (0:00:00.423)       0:00:03.045 ********** 
changed: [managed-node1] => {
    "changed": true,
    "gid": 0,
    "group": "root",
    "mode": "0700",
    "owner": "root",
    "path": "/root/.lsr_auditd_purge_rulesd.backup",
    "secontext": "unconfined_u:object_r:admin_home_t:s0",
    "size": 6,
    "state": "directory",
    "uid": 0
}

TASK [Snapshot rules.d tree for full restore after test] ***********************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:27
Friday 17 April 2026  17:28:14 -0400 (0:00:00.334)       0:00:03.380 ********** 
changed: [managed-node1] => {
    "changed": true,
    "checksum": null,
    "dest": "/root/.lsr_auditd_purge_rulesd.backup/",
    "gid": 0,
    "group": "root",
    "md5sum": null,
    "mode": "0750",
    "owner": "root",
    "secontext": "unconfined_u:object_r:admin_home_t:s0",
    "size": 45,
    "src": "/etc/audit/rules.d/",
    "state": "directory",
    "uid": 0
}

TASK [Install decoy rules fragment to be removed by purge] *********************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:34
Friday 17 April 2026  17:28:14 -0400 (0:00:00.337)       0:00:03.717 ********** 
changed: [managed-node1] => {
    "changed": true,
    "checksum": "35324fa08aa315fc1ab79570382f077fec44dce9",
    "dest": "/etc/audit/rules.d/99-lsr-purge-decoy.rules",
    "gid": 0,
    "group": "root",
    "md5sum": "f628c72c0861f587eff2d10f92b8e21b",
    "mode": "0644",
    "owner": "root",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 89,
    "src": "/root/.ansible/tmp/ansible-tmp-1776461294.6099-10878-157211802223445/.source.rules",
    "state": "file",
    "uid": 0
}

TASK [Run auditd role with purge enabled] **************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:42
Friday 17 April 2026  17:28:15 -0400 (0:00:00.612)       0:00:04.329 ********** 
included: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml for managed-node1

TASK [Clear facts] *************************************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:9
Friday 17 April 2026  17:28:15 -0400 (0:00:00.019)       0:00:04.349 ********** 
META: facts cleared

TASK [Run the role] ************************************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:23
Friday 17 April 2026  17:28:15 -0400 (0:00:00.000)       0:00:04.350 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "__sr_failed_when is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Run the role normally] ***************************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:33
Friday 17 April 2026  17:28:15 -0400 (0:00:00.014)       0:00:04.364 ********** 
included: fedora.linux_system_roles.auditd for managed-node1

TASK [fedora.linux_system_roles.auditd : Validating arguments against arg spec 'main' - Manage auditd and audit rules] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:5
Friday 17 April 2026  17:28:15 -0400 (0:00:00.066)       0:00:04.431 ********** 
ok: [managed-node1] => {
    "changed": false,
    "validate_args_context": {
        "argument_spec_name": "main",
        "name": "auditd",
        "path": "/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd",
        "type": "role"
    }
}

MSG:

The arg spec validation passed

TASK [fedora.linux_system_roles.auditd : Validate role parameters] *************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:3
Friday 17 April 2026  17:28:15 -0400 (0:00:00.013)       0:00:04.445 ********** 
included: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml for managed-node1

TASK [fedora.linux_system_roles.auditd : Assert num_logs range (num_logs_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:4
Friday 17 April 2026  17:28:15 -0400 (0:00:00.027)       0:00:04.473 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert freq range (freq_parser)] ******
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:11
Friday 17 April 2026  17:28:15 -0400 (0:00:00.014)       0:00:04.488 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert incremental flush requires non-zero freq (sanity_check)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:18
Friday 17 April 2026  17:28:15 -0400 (0:00:00.015)       0:00:04.503 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert priority_boost range (priority_boost_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:25
Friday 17 April 2026  17:28:15 -0400 (0:00:00.015)       0:00:04.518 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert q_depth range (q_depth_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:31
Friday 17 April 2026  17:28:15 -0400 (0:00:00.014)       0:00:04.533 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert max_restarts range (max_restarts_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:38
Friday 17 April 2026  17:28:15 -0400 (0:00:00.014)       0:00:04.548 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_listen_port range when listener enabled in build (tcp_listen_port_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:44
Friday 17 April 2026  17:28:15 -0400 (0:00:00.013)       0:00:04.562 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_listen_queue range (tcp_listen_queue_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:50
Friday 17 April 2026  17:28:15 -0400 (0:00:00.014)       0:00:04.577 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_max_per_addr range (tcp_max_per_addr_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:56
Friday 17 April 2026  17:28:15 -0400 (0:00:00.016)       0:00:04.593 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_max_idle range (tcp_client_max_idle_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:62
Friday 17 April 2026  17:28:15 -0400 (0:00:00.017)       0:00:04.611 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_ports format (tcp_client_ports_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:68
Friday 17 April 2026  17:28:15 -0400 (0:00:00.015)       0:00:04.626 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_tcp_client_ports is string",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_ports range order] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:78
Friday 17 April 2026  17:28:15 -0400 (0:00:00.013)       0:00:04.640 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_tcp_client_ports is string",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert space_left_action rejects halt (space_action_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:87
Friday 17 April 2026  17:28:15 -0400 (0:00:00.013)       0:00:04.654 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert space_left percentage is between 1 and 99 when given as N%] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:93
Friday 17 April 2026  17:28:15 -0400 (0:00:00.013)       0:00:04.667 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "(auditd_space_left | string) is match('^[0-9]+%$')",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert admin_space_left percentage is between 1 and 99 when given as N%] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:105
Friday 17 April 2026  17:28:15 -0400 (0:00:00.013)       0:00:04.681 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "(auditd_admin_space_left | string) is match('^[0-9]+%$')",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert space_left is greater than admin_space_left when both use same form] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:117
Friday 17 April 2026  17:28:15 -0400 (0:00:00.014)       0:00:04.695 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert disk_full_action rejects email (disk_full_action_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:141
Friday 17 April 2026  17:28:15 -0400 (0:00:00.021)       0:00:04.717 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert disk_error_action rejects email and rotate (disk_error_action_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:147
Friday 17 April 2026  17:28:15 -0400 (0:00:00.014)       0:00:04.732 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert exec companion paths when action is exec] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:153
Friday 17 April 2026  17:28:15 -0400 (0:00:00.014)       0:00:04.746 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_max_log_file_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert space_left_action exec path] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:160
Friday 17 April 2026  17:28:15 -0400 (0:00:00.010)       0:00:04.757 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_space_left_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert admin_space_left_action exec path] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:167
Friday 17 April 2026  17:28:15 -0400 (0:00:00.011)       0:00:04.768 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_admin_space_left_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert disk_full_action exec path] ****
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:174
Friday 17 April 2026  17:28:15 -0400 (0:00:00.011)       0:00:04.779 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_disk_full_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert disk_error_action exec path] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:181
Friday 17 April 2026  17:28:15 -0400 (0:00:00.011)       0:00:04.791 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_disk_error_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert name when name_format is user (resolve_node)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:188
Friday 17 April 2026  17:28:15 -0400 (0:00:00.012)       0:00:04.803 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_name_format | lower == 'user'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert auditd_rules entries] **********
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:195
Friday 17 April 2026  17:28:15 -0400 (0:00:00.010)       0:00:04.814 ********** 
ok: [managed-node1] => (item=lsr_auditd_purge_test) => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": {
        "file": "/etc/issue",
        "keyname": "lsr_auditd_purge_test",
        "permissions": [
            "read"
        ]
    }
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert syscall rules include required keys] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:205
Friday 17 April 2026  17:28:15 -0400 (0:00:00.022)       0:00:04.836 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "skipped_reason": "No items in the list"
}

TASK [fedora.linux_system_roles.auditd : Assert permission keys for file rules] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:216
Friday 17 April 2026  17:28:15 -0400 (0:00:00.015)       0:00:04.852 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Set platform/version specific variables] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:6
Friday 17 April 2026  17:28:15 -0400 (0:00:00.021)       0:00:04.873 ********** 
included: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml for managed-node1

TASK [fedora.linux_system_roles.auditd : Ensure ansible_facts used by role] ****
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:2
Friday 17 April 2026  17:28:15 -0400 (0:00:00.028)       0:00:04.902 ********** 
ok: [managed-node1]

TASK [fedora.linux_system_roles.auditd : Check if system is ostree] ************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:10
Friday 17 April 2026  17:28:16 -0400 (0:00:00.532)       0:00:05.435 ********** 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [fedora.linux_system_roles.auditd : Set flag to indicate system is ostree] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:15
Friday 17 April 2026  17:28:16 -0400 (0:00:00.331)       0:00:05.766 ********** 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_is_ostree": false
    },
    "changed": false
}

TASK [fedora.linux_system_roles.auditd : Set platform/version specific variables] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:19
Friday 17 April 2026  17:28:16 -0400 (0:00:00.020)       0:00:05.786 ********** 
skipping: [managed-node1] => (item=RedHat.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "RedHat.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS_9.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS_9.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS_9.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS_9.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => {
    "changed": false
}

MSG:

All items skipped

TASK [fedora.linux_system_roles.auditd : Resolve package names for OS family] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:34
Friday 17 April 2026  17:28:16 -0400 (0:00:00.028)       0:00:05.815 ********** 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_packages": [
            "audit"
        ]
    },
    "changed": false
}

TASK [fedora.linux_system_roles.auditd : Install audit packages] ***************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:9
Friday 17 April 2026  17:28:16 -0400 (0:00:00.016)       0:00:05.831 ********** 
ok: [managed-node1] => {
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [fedora.linux_system_roles.auditd : Deploy auditd configuration] **********
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:15
Friday 17 April 2026  17:28:18 -0400 (0:00:01.381)       0:00:07.212 ********** 
ok: [managed-node1] => {
    "changed": false,
    "checksum": "33eefb6af1c751110a125b8b468118e6f0edb244",
    "dest": "/etc/audit/auditd.conf",
    "gid": 0,
    "group": "root",
    "mode": "0640",
    "owner": "root",
    "path": "/etc/audit/auditd.conf",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 852,
    "state": "file",
    "uid": 0
}

TASK [fedora.linux_system_roles.auditd : Ensure rules.d directory exists] ******
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:22
Friday 17 April 2026  17:28:18 -0400 (0:00:00.621)       0:00:07.834 ********** 
ok: [managed-node1] => {
    "changed": false,
    "gid": 0,
    "group": "root",
    "mode": "0750",
    "owner": "root",
    "path": "/etc/audit/rules.d",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 77,
    "state": "directory",
    "uid": 0
}

TASK [fedora.linux_system_roles.auditd : Purge rules.d when requested] *********
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:28
Friday 17 April 2026  17:28:19 -0400 (0:00:00.347)       0:00:08.182 ********** 
included: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml for managed-node1

TASK [fedora.linux_system_roles.auditd : Discover files in rules.d] ************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:12
Friday 17 April 2026  17:28:19 -0400 (0:00:00.035)       0:00:08.217 ********** 
ok: [managed-node1] => {
    "changed": false,
    "examined": 3,
    "files": [
        {
            "atime": 1776461090.574,
            "ctime": 1776150070.909,
            "dev": 51713,
            "gid": 0,
            "gr_name": "root",
            "inode": 9085168,
            "isblk": false,
            "ischr": false,
            "isdir": false,
            "isfifo": false,
            "isgid": false,
            "islnk": false,
            "isreg": true,
            "issock": false,
            "isuid": false,
            "mode": "0600",
            "mtime": 1776150070.907,
            "nlink": 1,
            "path": "/etc/audit/rules.d/audit.rules",
            "pw_name": "root",
            "rgrp": false,
            "roth": false,
            "rusr": true,
            "size": 244,
            "uid": 0,
            "wgrp": false,
            "woth": false,
            "wusr": true,
            "xgrp": false,
            "xoth": false,
            "xusr": false
        },
        {
            "atime": 1776461269.872031,
            "ctime": 1776461268.4230366,
            "dev": 51713,
            "gid": 0,
            "gr_name": "root",
            "inode": 264241348,
            "isblk": false,
            "ischr": false,
            "isdir": false,
            "isfifo": false,
            "isgid": false,
            "islnk": false,
            "isreg": true,
            "issock": false,
            "isuid": false,
            "mode": "0664",
            "mtime": 1776461268.1720374,
            "nlink": 1,
            "path": "/etc/audit/rules.d/custom.rules",
            "pw_name": "root",
            "rgrp": true,
            "roth": true,
            "rusr": true,
            "size": 268,
            "uid": 0,
            "wgrp": true,
            "woth": false,
            "wusr": true,
            "xgrp": false,
            "xoth": false,
            "xusr": false
        },
        {
            "atime": 1776461295.131934,
            "ctime": 1776461295.134934,
            "dev": 51713,
            "gid": 0,
            "gr_name": "root",
            "inode": 469762245,
            "isblk": false,
            "ischr": false,
            "isdir": false,
            "isfifo": false,
            "isgid": false,
            "islnk": false,
            "isreg": true,
            "issock": false,
            "isuid": false,
            "mode": "0644",
            "mtime": 1776461294.8909347,
            "nlink": 1,
            "path": "/etc/audit/rules.d/99-lsr-purge-decoy.rules",
            "pw_name": "root",
            "rgrp": true,
            "roth": true,
            "rusr": true,
            "size": 89,
            "uid": 0,
            "wgrp": false,
            "woth": false,
            "wusr": true,
            "xgrp": false,
            "xoth": false,
            "xusr": false
        }
    ],
    "matched": 3,
    "skipped_paths": {}
}

MSG:

All paths examined

TASK [fedora.linux_system_roles.auditd : Stat existing custom.rules before purge] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:18
Friday 17 April 2026  17:28:19 -0400 (0:00:00.426)       0:00:08.644 ********** 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776461269.872031,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "69008de23bc363984514521ddc3cd86619715c09",
        "ctime": 1776461268.4230366,
        "dev": 51713,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 264241348,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0664",
        "mtime": 1776461268.1720374,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 268,
        "uid": 0,
        "version": "243912750",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [fedora.linux_system_roles.auditd : Read existing custom.rules for comparison] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:23
Friday 17 April 2026  17:28:19 -0400 (0:00:00.347)       0:00:08.992 ********** 
ok: [managed-node1] => {
    "changed": false,
    "content": "IwojIEFuc2libGUgbWFuYWdlZAojCiMgc3lzdGVtX3JvbGU6YXVkaXRkCgoKIyBEZWxldGUgYWxsIHByZXZpb3VzIHJ1bGVzCi1ECiMgU2V0IGJ1ZmZlciBzaXplCi1iIDMyNzY4CiMgU2V0IGZhaWx1cmUgYmVoYXZpb3IKLWYgMQojIFNldCB0aGUgbWF4aW11bSBhbW91bnQgb2YgbWVzc2FnZXMgcGVyIHNlY29uZAotciA2MAojIFNldCBlbmFibGUgZmxhZyAoMD1kaXNhYmxlLCAxPWVuYWJsZSwgMj1sb2NrZWQsIHJlcXVpcmVzIHJlYm9vdCB0byB1bmxvY2spCi1lIDEKCg==",
    "encoding": "base64",
    "source": "/etc/audit/rules.d/custom.rules"
}

TASK [fedora.linux_system_roles.auditd : Record whether to keep existing custom.rules (managed rules)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:29
Friday 17 April 2026  17:28:20 -0400 (0:00:00.414)       0:00:09.407 ********** 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_purge_keep_custom_rules": false
    },
    "changed": false
}

TASK [fedora.linux_system_roles.auditd : Remove files from rules.d] ************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:62
Friday 17 April 2026  17:28:20 -0400 (0:00:00.041)       0:00:09.449 ********** 
changed: [managed-node1] => (item=/etc/audit/rules.d/audit.rules) => {
    "ansible_loop_var": "item",
    "changed": true,
    "item": {
        "atime": 1776461090.574,
        "ctime": 1776150070.909,
        "dev": 51713,
        "gid": 0,
        "gr_name": "root",
        "inode": 9085168,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mode": "0600",
        "mtime": 1776150070.907,
        "nlink": 1,
        "path": "/etc/audit/rules.d/audit.rules",
        "pw_name": "root",
        "rgrp": false,
        "roth": false,
        "rusr": true,
        "size": 244,
        "uid": 0,
        "wgrp": false,
        "woth": false,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    },
    "path": "/etc/audit/rules.d/audit.rules",
    "state": "absent"
}
changed: [managed-node1] => (item=/etc/audit/rules.d/custom.rules) => {
    "ansible_loop_var": "item",
    "changed": true,
    "item": {
        "atime": 1776461269.872031,
        "ctime": 1776461268.4230366,
        "dev": 51713,
        "gid": 0,
        "gr_name": "root",
        "inode": 264241348,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mode": "0664",
        "mtime": 1776461268.1720374,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 268,
        "uid": 0,
        "wgrp": true,
        "woth": false,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    },
    "path": "/etc/audit/rules.d/custom.rules",
    "state": "absent"
}
changed: [managed-node1] => (item=/etc/audit/rules.d/99-lsr-purge-decoy.rules) => {
    "ansible_loop_var": "item",
    "changed": true,
    "item": {
        "atime": 1776461295.131934,
        "ctime": 1776461295.134934,
        "dev": 51713,
        "gid": 0,
        "gr_name": "root",
        "inode": 469762245,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mode": "0644",
        "mtime": 1776461294.8909347,
        "nlink": 1,
        "path": "/etc/audit/rules.d/99-lsr-purge-decoy.rules",
        "pw_name": "root",
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 89,
        "uid": 0,
        "wgrp": false,
        "woth": false,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    },
    "path": "/etc/audit/rules.d/99-lsr-purge-decoy.rules",
    "state": "absent"
}
Notification for handler Run augenrules has been saved.
Notification for handler Run augenrules has been saved.
Notification for handler Run augenrules has been saved.

TASK [fedora.linux_system_roles.auditd : Deploy custom audit rules] ************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:34
Friday 17 April 2026  17:28:21 -0400 (0:00:01.005)       0:00:10.455 ********** 
Notification for handler Run augenrules has been saved.
changed: [managed-node1] => {
    "changed": true,
    "checksum": "4f9017c3cb8f8ddf2a782812732781a02ca551eb",
    "dest": "/etc/audit/rules.d/custom.rules",
    "gid": 0,
    "group": "root",
    "md5sum": "cc34bac1a48291a6662d6a5254eaaf16",
    "mode": "0664",
    "owner": "root",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 312,
    "src": "/root/.ansible/tmp/ansible-tmp-1776461301.3503487-11045-113959550837681/.source.rules",
    "state": "file",
    "uid": 0
}

TASK [fedora.linux_system_roles.auditd : Start and enable auditd service] ******
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:44
Friday 17 April 2026  17:28:21 -0400 (0:00:00.651)       0:00:11.106 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_start_service | bool",
    "skip_reason": "Conditional result was False"
}

TASK [Flush handlers after first role run] *************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:54
Friday 17 April 2026  17:28:21 -0400 (0:00:00.011)       0:00:11.117 ********** 
NOTIFIED HANDLER fedora.linux_system_roles.auditd : Run augenrules for managed-node1
META: triggered running handlers for managed-node1

RUNNING HANDLER [fedora.linux_system_roles.auditd : Run augenrules] ************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/handlers/main.yml:3
Friday 17 April 2026  17:28:21 -0400 (0:00:00.000)       0:00:11.118 ********** 
NOTIFIED HANDLER fedora.linux_system_roles.auditd : Load audit rules for managed-node1
changed: [managed-node1] => {
    "changed": true,
    "cmd": [
        "augenrules"
    ],
    "delta": "0:00:00.024682",
    "end": "2026-04-17 17:28:22.359966",
    "rc": 0,
    "start": "2026-04-17 17:28:22.335284"
}

RUNNING HANDLER [fedora.linux_system_roles.auditd : Load audit rules] **********
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/handlers/main.yml:9
Friday 17 April 2026  17:28:22 -0400 (0:00:00.436)       0:00:11.555 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_start_service | bool",
    "skip_reason": "Conditional result was False"
}

TASK [Stat decoy fragment after purge] *****************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:57
Friday 17 April 2026  17:28:22 -0400 (0:00:00.011)       0:00:11.566 ********** 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [Verify decoy rules file was purged] **************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:62
Friday 17 April 2026  17:28:22 -0400 (0:00:00.336)       0:00:11.903 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Read custom.rules after purge] *******************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:67
Friday 17 April 2026  17:28:22 -0400 (0:00:00.013)       0:00:11.916 ********** 
ok: [managed-node1] => {
    "changed": false,
    "content": "IwojIEFuc2libGUgbWFuYWdlZAojCiMgc3lzdGVtX3JvbGU6YXVkaXRkCgoKIyBEZWxldGUgYWxsIHByZXZpb3VzIHJ1bGVzCi1ECiMgU2V0IGJ1ZmZlciBzaXplCi1iIDMyNzY4CiMgU2V0IGZhaWx1cmUgYmVoYXZpb3IKLWYgMQojIFNldCB0aGUgbWF4aW11bSBhbW91bnQgb2YgbWVzc2FnZXMgcGVyIHNlY29uZAotciA2MAojIFNldCBlbmFibGUgZmxhZyAoMD1kaXNhYmxlLCAxPWVuYWJsZSwgMj1sb2NrZWQsIHJlcXVpcmVzIHJlYm9vdCB0byB1bmxvY2spCi1lIDEKCi13IC9ldGMvaXNzdWUgLXAgciAtayBsc3JfYXVkaXRkX3B1cmdlX3Rlc3QK",
    "encoding": "base64",
    "source": "/etc/audit/rules.d/custom.rules"
}

TASK [Verify custom.rules reflects role auditd_rules] **************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:72
Friday 17 April 2026  17:28:23 -0400 (0:00:00.322)       0:00:12.238 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Capture checksum of custom.rules before second role run] *****************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:80
Friday 17 April 2026  17:28:23 -0400 (0:00:00.015)       0:00:12.254 ********** 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776461302.3449101,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "d36697555eba276c9547cb7b31718d7ab6a8cea2b2ac74c41c41bbbdc64687cb",
        "ctime": 1776461301.9119084,
        "dev": 51713,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 583008465,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0664",
        "mtime": 1776461301.6659088,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 312,
        "uid": 0,
        "version": "587589406",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Run auditd role again with identical purge and rules] ********************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:86
Friday 17 April 2026  17:28:23 -0400 (0:00:00.337)       0:00:12.591 ********** 
included: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml for managed-node1

TASK [Clear facts] *************************************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:9
Friday 17 April 2026  17:28:23 -0400 (0:00:00.018)       0:00:12.610 ********** 
META: facts cleared

TASK [Run the role] ************************************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:23
Friday 17 April 2026  17:28:23 -0400 (0:00:00.000)       0:00:12.611 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "__sr_failed_when is defined",
    "skip_reason": "Conditional result was False"
}

TASK [Run the role normally] ***************************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/run_role_with_clear_facts.yml:33
Friday 17 April 2026  17:28:23 -0400 (0:00:00.014)       0:00:12.625 ********** 
included: fedora.linux_system_roles.auditd for managed-node1

TASK [fedora.linux_system_roles.auditd : Validating arguments against arg spec 'main' - Manage auditd and audit rules] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:5
Friday 17 April 2026  17:28:23 -0400 (0:00:00.029)       0:00:12.654 ********** 
ok: [managed-node1] => {
    "changed": false,
    "validate_args_context": {
        "argument_spec_name": "main",
        "name": "auditd",
        "path": "/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd",
        "type": "role"
    }
}

MSG:

The arg spec validation passed

TASK [fedora.linux_system_roles.auditd : Validate role parameters] *************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:3
Friday 17 April 2026  17:28:23 -0400 (0:00:00.016)       0:00:12.671 ********** 
included: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml for managed-node1

TASK [fedora.linux_system_roles.auditd : Assert num_logs range (num_logs_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:4
Friday 17 April 2026  17:28:23 -0400 (0:00:00.025)       0:00:12.697 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert freq range (freq_parser)] ******
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:11
Friday 17 April 2026  17:28:23 -0400 (0:00:00.015)       0:00:12.712 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert incremental flush requires non-zero freq (sanity_check)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:18
Friday 17 April 2026  17:28:23 -0400 (0:00:00.014)       0:00:12.726 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert priority_boost range (priority_boost_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:25
Friday 17 April 2026  17:28:23 -0400 (0:00:00.014)       0:00:12.741 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert q_depth range (q_depth_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:31
Friday 17 April 2026  17:28:23 -0400 (0:00:00.015)       0:00:12.757 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert max_restarts range (max_restarts_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:38
Friday 17 April 2026  17:28:23 -0400 (0:00:00.016)       0:00:12.774 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_listen_port range when listener enabled in build (tcp_listen_port_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:44
Friday 17 April 2026  17:28:23 -0400 (0:00:00.016)       0:00:12.790 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_listen_queue range (tcp_listen_queue_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:50
Friday 17 April 2026  17:28:23 -0400 (0:00:00.015)       0:00:12.806 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_max_per_addr range (tcp_max_per_addr_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:56
Friday 17 April 2026  17:28:23 -0400 (0:00:00.015)       0:00:12.821 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_max_idle range (tcp_client_max_idle_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:62
Friday 17 April 2026  17:28:23 -0400 (0:00:00.015)       0:00:12.836 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_ports format (tcp_client_ports_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:68
Friday 17 April 2026  17:28:23 -0400 (0:00:00.015)       0:00:12.851 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_tcp_client_ports is string",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert tcp_client_ports range order] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:78
Friday 17 April 2026  17:28:23 -0400 (0:00:00.014)       0:00:12.866 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_tcp_client_ports is string",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert space_left_action rejects halt (space_action_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:87
Friday 17 April 2026  17:28:23 -0400 (0:00:00.014)       0:00:12.880 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert space_left percentage is between 1 and 99 when given as N%] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:93
Friday 17 April 2026  17:28:23 -0400 (0:00:00.013)       0:00:12.894 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "(auditd_space_left | string) is match('^[0-9]+%$')",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert admin_space_left percentage is between 1 and 99 when given as N%] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:105
Friday 17 April 2026  17:28:23 -0400 (0:00:00.015)       0:00:12.909 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "(auditd_admin_space_left | string) is match('^[0-9]+%$')",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert space_left is greater than admin_space_left when both use same form] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:117
Friday 17 April 2026  17:28:23 -0400 (0:00:00.015)       0:00:12.924 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert disk_full_action rejects email (disk_full_action_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:141
Friday 17 April 2026  17:28:23 -0400 (0:00:00.022)       0:00:12.947 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert disk_error_action rejects email and rotate (disk_error_action_parser)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:147
Friday 17 April 2026  17:28:23 -0400 (0:00:00.014)       0:00:12.962 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert exec companion paths when action is exec] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:153
Friday 17 April 2026  17:28:23 -0400 (0:00:00.014)       0:00:12.976 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_max_log_file_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert space_left_action exec path] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:160
Friday 17 April 2026  17:28:23 -0400 (0:00:00.011)       0:00:12.988 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_space_left_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert admin_space_left_action exec path] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:167
Friday 17 April 2026  17:28:23 -0400 (0:00:00.011)       0:00:12.999 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_admin_space_left_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert disk_full_action exec path] ****
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:174
Friday 17 April 2026  17:28:23 -0400 (0:00:00.010)       0:00:13.010 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_disk_full_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert disk_error_action exec path] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:181
Friday 17 April 2026  17:28:23 -0400 (0:00:00.011)       0:00:13.021 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_disk_error_action | lower == 'exec'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert name when name_format is user (resolve_node)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:188
Friday 17 April 2026  17:28:23 -0400 (0:00:00.012)       0:00:13.033 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_name_format | lower == 'user'",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Assert auditd_rules entries] **********
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:195
Friday 17 April 2026  17:28:23 -0400 (0:00:00.011)       0:00:13.045 ********** 
ok: [managed-node1] => (item=lsr_auditd_purge_test) => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": {
        "file": "/etc/issue",
        "keyname": "lsr_auditd_purge_test",
        "permissions": [
            "read"
        ]
    }
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Assert syscall rules include required keys] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:205
Friday 17 April 2026  17:28:23 -0400 (0:00:00.022)       0:00:13.068 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "skipped_reason": "No items in the list"
}

TASK [fedora.linux_system_roles.auditd : Assert permission keys for file rules] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/assert_role_vars.yml:216
Friday 17 April 2026  17:28:23 -0400 (0:00:00.015)       0:00:13.084 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [fedora.linux_system_roles.auditd : Set platform/version specific variables] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:6
Friday 17 April 2026  17:28:23 -0400 (0:00:00.022)       0:00:13.106 ********** 
included: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml for managed-node1

TASK [fedora.linux_system_roles.auditd : Ensure ansible_facts used by role] ****
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:2
Friday 17 April 2026  17:28:23 -0400 (0:00:00.027)       0:00:13.134 ********** 
ok: [managed-node1]

TASK [fedora.linux_system_roles.auditd : Check if system is ostree] ************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:10
Friday 17 April 2026  17:28:24 -0400 (0:00:00.537)       0:00:13.672 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "not __auditd_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Set flag to indicate system is ostree] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:15
Friday 17 April 2026  17:28:24 -0400 (0:00:00.015)       0:00:13.687 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "not __auditd_is_ostree is defined",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Set platform/version specific variables] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:19
Friday 17 April 2026  17:28:24 -0400 (0:00:00.014)       0:00:13.701 ********** 
skipping: [managed-node1] => (item=RedHat.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "RedHat.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS_9.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS_9.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS_9.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "__vars_file is file",
    "item": "CentOS_9.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => {
    "changed": false
}

MSG:

All items skipped

TASK [fedora.linux_system_roles.auditd : Resolve package names for OS family] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:34
Friday 17 April 2026  17:28:24 -0400 (0:00:00.026)       0:00:13.728 ********** 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_packages": [
            "audit"
        ]
    },
    "changed": false
}

TASK [fedora.linux_system_roles.auditd : Install audit packages] ***************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:9
Friday 17 April 2026  17:28:24 -0400 (0:00:00.015)       0:00:13.743 ********** 
ok: [managed-node1] => {
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [fedora.linux_system_roles.auditd : Deploy auditd configuration] **********
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:15
Friday 17 April 2026  17:28:25 -0400 (0:00:01.254)       0:00:14.998 ********** 
ok: [managed-node1] => {
    "changed": false,
    "checksum": "33eefb6af1c751110a125b8b468118e6f0edb244",
    "dest": "/etc/audit/auditd.conf",
    "gid": 0,
    "group": "root",
    "mode": "0640",
    "owner": "root",
    "path": "/etc/audit/auditd.conf",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 852,
    "state": "file",
    "uid": 0
}

TASK [fedora.linux_system_roles.auditd : Ensure rules.d directory exists] ******
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:22
Friday 17 April 2026  17:28:26 -0400 (0:00:00.621)       0:00:15.620 ********** 
ok: [managed-node1] => {
    "changed": false,
    "gid": 0,
    "group": "root",
    "mode": "0750",
    "owner": "root",
    "path": "/etc/audit/rules.d",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 26,
    "state": "directory",
    "uid": 0
}

TASK [fedora.linux_system_roles.auditd : Purge rules.d when requested] *********
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:28
Friday 17 April 2026  17:28:26 -0400 (0:00:00.338)       0:00:15.958 ********** 
included: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml for managed-node1

TASK [fedora.linux_system_roles.auditd : Discover files in rules.d] ************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:12
Friday 17 April 2026  17:28:26 -0400 (0:00:00.035)       0:00:15.994 ********** 
ok: [managed-node1] => {
    "changed": false,
    "examined": 1,
    "files": [
        {
            "atime": 1776461302.3449101,
            "ctime": 1776461301.9119084,
            "dev": 51713,
            "gid": 0,
            "gr_name": "root",
            "inode": 583008465,
            "isblk": false,
            "ischr": false,
            "isdir": false,
            "isfifo": false,
            "isgid": false,
            "islnk": false,
            "isreg": true,
            "issock": false,
            "isuid": false,
            "mode": "0664",
            "mtime": 1776461301.6659088,
            "nlink": 1,
            "path": "/etc/audit/rules.d/custom.rules",
            "pw_name": "root",
            "rgrp": true,
            "roth": true,
            "rusr": true,
            "size": 312,
            "uid": 0,
            "wgrp": true,
            "woth": false,
            "wusr": true,
            "xgrp": false,
            "xoth": false,
            "xusr": false
        }
    ],
    "matched": 1,
    "skipped_paths": {}
}

MSG:

All paths examined

TASK [fedora.linux_system_roles.auditd : Stat existing custom.rules before purge] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:18
Friday 17 April 2026  17:28:27 -0400 (0:00:00.333)       0:00:16.328 ********** 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776461302.3449101,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "4f9017c3cb8f8ddf2a782812732781a02ca551eb",
        "ctime": 1776461301.9119084,
        "dev": 51713,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 583008465,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0664",
        "mtime": 1776461301.6659088,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 312,
        "uid": 0,
        "version": "587589406",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [fedora.linux_system_roles.auditd : Read existing custom.rules for comparison] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:23
Friday 17 April 2026  17:28:27 -0400 (0:00:00.344)       0:00:16.672 ********** 
ok: [managed-node1] => {
    "changed": false,
    "content": "IwojIEFuc2libGUgbWFuYWdlZAojCiMgc3lzdGVtX3JvbGU6YXVkaXRkCgoKIyBEZWxldGUgYWxsIHByZXZpb3VzIHJ1bGVzCi1ECiMgU2V0IGJ1ZmZlciBzaXplCi1iIDMyNzY4CiMgU2V0IGZhaWx1cmUgYmVoYXZpb3IKLWYgMQojIFNldCB0aGUgbWF4aW11bSBhbW91bnQgb2YgbWVzc2FnZXMgcGVyIHNlY29uZAotciA2MAojIFNldCBlbmFibGUgZmxhZyAoMD1kaXNhYmxlLCAxPWVuYWJsZSwgMj1sb2NrZWQsIHJlcXVpcmVzIHJlYm9vdCB0byB1bmxvY2spCi1lIDEKCi13IC9ldGMvaXNzdWUgLXAgciAtayBsc3JfYXVkaXRkX3B1cmdlX3Rlc3QK",
    "encoding": "base64",
    "source": "/etc/audit/rules.d/custom.rules"
}

TASK [fedora.linux_system_roles.auditd : Record whether to keep existing custom.rules (managed rules)] ***
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:29
Friday 17 April 2026  17:28:27 -0400 (0:00:00.326)       0:00:16.999 ********** 
ok: [managed-node1] => {
    "ansible_facts": {
        "__auditd_purge_keep_custom_rules": true
    },
    "changed": false
}

TASK [fedora.linux_system_roles.auditd : Remove files from rules.d] ************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:62
Friday 17 April 2026  17:28:27 -0400 (0:00:00.043)       0:00:17.042 ********** 
skipping: [managed-node1] => (item=/etc/audit/rules.d/custom.rules)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "false_condition": "not (\n  (item.path | basename == 'custom.rules')\n  and (__auditd_purge_keep_custom_rules | default(false) | bool)\n)",
    "item": {
        "atime": 1776461302.3449101,
        "ctime": 1776461301.9119084,
        "dev": 51713,
        "gid": 0,
        "gr_name": "root",
        "inode": 583008465,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mode": "0664",
        "mtime": 1776461301.6659088,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 312,
        "uid": 0,
        "wgrp": true,
        "woth": false,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    },
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => {
    "changed": false
}

MSG:

All items skipped

TASK [fedora.linux_system_roles.auditd : Deploy custom audit rules] ************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:34
Friday 17 April 2026  17:28:27 -0400 (0:00:00.017)       0:00:17.060 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "not (__auditd_purge_keep_custom_rules | default(false) | bool)",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.auditd : Start and enable auditd service] ******
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:44
Friday 17 April 2026  17:28:27 -0400 (0:00:00.012)       0:00:17.073 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "auditd_start_service | bool",
    "skip_reason": "Conditional result was False"
}

TASK [Flush handlers after second role run] ************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:98
Friday 17 April 2026  17:28:27 -0400 (0:00:00.011)       0:00:17.085 ********** 
META: triggered running handlers for managed-node1

TASK [Stat custom.rules after second role run] *********************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:101
Friday 17 April 2026  17:28:27 -0400 (0:00:00.000)       0:00:17.085 ********** 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776461302.3449101,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 8,
        "charset": "us-ascii",
        "checksum": "d36697555eba276c9547cb7b31718d7ab6a8cea2b2ac74c41c41bbbdc64687cb",
        "ctime": 1776461301.9119084,
        "dev": 51713,
        "device_type": 0,
        "executable": false,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 583008465,
        "isblk": false,
        "ischr": false,
        "isdir": false,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": true,
        "issock": false,
        "isuid": false,
        "mimetype": "text/plain",
        "mode": "0664",
        "mtime": 1776461301.6659088,
        "nlink": 1,
        "path": "/etc/audit/rules.d/custom.rules",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": true,
        "rusr": true,
        "size": 312,
        "uid": 0,
        "version": "587589406",
        "wgrp": true,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": false,
        "xoth": false,
        "xusr": false
    }
}

TASK [Verify custom.rules unchanged on idempotent second run] ******************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:107
Friday 17 April 2026  17:28:28 -0400 (0:00:00.339)       0:00:17.425 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Stat decoy path after second run] ****************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:116
Friday 17 April 2026  17:28:28 -0400 (0:00:00.020)       0:00:17.445 ********** 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [Verify decoy did not reappear] *******************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:121
Friday 17 April 2026  17:28:28 -0400 (0:00:00.327)       0:00:17.773 ********** 
ok: [managed-node1] => {
    "changed": false
}

MSG:

All assertions passed

TASK [Check whether purge test rules.d snapshot exists] ************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:127
Friday 17 April 2026  17:28:28 -0400 (0:00:00.013)       0:00:17.787 ********** 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "atime": 1776461294.5199363,
        "attr_flags": "",
        "attributes": [],
        "block_size": 4096,
        "blocks": 0,
        "charset": "binary",
        "ctime": 1776461294.5219362,
        "dev": 51713,
        "device_type": 0,
        "executable": true,
        "exists": true,
        "gid": 0,
        "gr_name": "root",
        "inode": 457179332,
        "isblk": false,
        "ischr": false,
        "isdir": true,
        "isfifo": false,
        "isgid": false,
        "islnk": false,
        "isreg": false,
        "issock": false,
        "isuid": false,
        "mimetype": "inode/directory",
        "mode": "0750",
        "mtime": 1776461294.5199363,
        "nlink": 2,
        "path": "/root/.lsr_auditd_purge_rulesd.backup",
        "pw_name": "root",
        "readable": true,
        "rgrp": true,
        "roth": false,
        "rusr": true,
        "size": 45,
        "uid": 0,
        "version": "274502834",
        "wgrp": false,
        "woth": false,
        "writeable": true,
        "wusr": true,
        "xgrp": true,
        "xoth": false,
        "xusr": true
    }
}

TASK [Remove rules.d tree before restoring snapshot] ***************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:135
Friday 17 April 2026  17:28:28 -0400 (0:00:00.337)       0:00:18.125 ********** 
changed: [managed-node1] => {
    "changed": true,
    "path": "/etc/audit/rules.d",
    "state": "absent"
}

TASK [Recreate empty rules.d directory] ****************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:140
Friday 17 April 2026  17:28:29 -0400 (0:00:00.334)       0:00:18.460 ********** 
changed: [managed-node1] => {
    "changed": true,
    "gid": 0,
    "group": "root",
    "mode": "0750",
    "owner": "root",
    "path": "/etc/audit/rules.d",
    "secontext": "unconfined_u:object_r:auditd_etc_t:s0",
    "size": 6,
    "state": "directory",
    "uid": 0
}

TASK [Copy snapshot back into rules.d] *****************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:146
Friday 17 April 2026  17:28:29 -0400 (0:00:00.341)       0:00:18.801 ********** 
changed: [managed-node1] => {
    "changed": true,
    "checksum": null,
    "dest": "/etc/audit/rules.d/",
    "gid": 0,
    "group": "root",
    "md5sum": null,
    "mode": "0750",
    "owner": "root",
    "secontext": "unconfined_u:object_r:auditd_etc_t:s0",
    "size": 45,
    "src": "/root/.lsr_auditd_purge_rulesd.backup/",
    "state": "directory",
    "uid": 0
}

TASK [Remove purge test rules.d snapshot directory on managed host] ************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:153
Friday 17 April 2026  17:28:29 -0400 (0:00:00.337)       0:00:19.138 ********** 
changed: [managed-node1] => {
    "changed": true,
    "path": "/root/.lsr_auditd_purge_rulesd.backup",
    "state": "absent"
}

TASK [Restore system state after purge test] ***********************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:159
Friday 17 April 2026  17:28:30 -0400 (0:00:00.338)       0:00:19.477 ********** 
included: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml for managed-node1

TASK [Restore auditd.conf from integration test backup] ************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:3
Friday 17 April 2026  17:28:30 -0400 (0:00:00.021)       0:00:19.499 ********** 
ok: [managed-node1] => {
    "changed": false,
    "checksum": "33eefb6af1c751110a125b8b468118e6f0edb244",
    "dest": "/etc/audit/auditd.conf",
    "gid": 0,
    "group": "root",
    "md5sum": "eda8c45ce09c30766469af2714e2eff9",
    "mode": "0640",
    "owner": "root",
    "secontext": "system_u:object_r:auditd_etc_t:s0",
    "size": 852,
    "src": "/root/.lsr_auditd_integration_auditd.conf.bak",
    "state": "file",
    "uid": 0
}

TASK [Remove auditd.conf backup file] ******************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:11
Friday 17 April 2026  17:28:30 -0400 (0:00:00.341)       0:00:19.840 ********** 
changed: [managed-node1] => {
    "changed": true,
    "path": "/root/.lsr_auditd_integration_auditd.conf.bak",
    "state": "absent"
}

TASK [Restore custom.rules from integration test backup] ***********************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:17
Friday 17 April 2026  17:28:31 -0400 (0:00:00.335)       0:00:20.175 ********** 
ok: [managed-node1] => {
    "changed": false,
    "checksum": "69008de23bc363984514521ddc3cd86619715c09",
    "dest": "/etc/audit/rules.d/custom.rules",
    "gid": 0,
    "group": "root",
    "md5sum": "e3743c173f2e0ea45fbb3aa9853a278e",
    "mode": "0664",
    "owner": "root",
    "secontext": "unconfined_u:object_r:auditd_etc_t:s0",
    "size": 268,
    "src": "/root/.lsr_auditd_integration_custom.rules.bak",
    "state": "file",
    "uid": 0
}

TASK [Remove custom.rules backup file] *****************************************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:25
Friday 17 April 2026  17:28:31 -0400 (0:00:00.341)       0:00:20.517 ********** 
changed: [managed-node1] => {
    "changed": true,
    "path": "/root/.lsr_auditd_integration_custom.rules.bak",
    "state": "absent"
}

TASK [Remove custom.rules if it did not exist before test] *********************
task path: /tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/cleanup.yml:31
Friday 17 April 2026  17:28:31 -0400 (0:00:00.337)       0:00:20.854 ********** 
skipping: [managed-node1] => {
    "changed": false,
    "false_condition": "not __auditd_integration_had_custom_rules | bool",
    "skip_reason": "Conditional result was False"
}

PLAY RECAP *********************************************************************
managed-node1              : ok=99   changed=14   unreachable=0    failed=0    skipped=34   rescued=0    ignored=0   

SYSTEM ROLES ERRORS BEGIN v1
[]
SYSTEM ROLES ERRORS END v1

TASKS RECAP ********************************************************************
Friday 17 April 2026  17:28:31 -0400 (0:00:00.011)       0:00:20.866 ********** 
=============================================================================== 
fedora.linux_system_roles.auditd : Install audit packages --------------- 1.38s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:9 
fedora.linux_system_roles.auditd : Install audit packages --------------- 1.25s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:9 
Gathering Facts --------------------------------------------------------- 1.03s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:5 
fedora.linux_system_roles.auditd : Remove files from rules.d ------------ 1.01s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:62 
fedora.linux_system_roles.auditd : Deploy custom audit rules ------------ 0.65s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:34 
fedora.linux_system_roles.auditd : Deploy auditd configuration ---------- 0.62s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:15 
fedora.linux_system_roles.auditd : Deploy auditd configuration ---------- 0.62s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:15 
Install decoy rules fragment to be removed by purge --------------------- 0.61s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:34 
fedora.linux_system_roles.auditd : Ensure ansible_facts used by role ---- 0.54s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:2 
fedora.linux_system_roles.auditd : Ensure ansible_facts used by role ---- 0.53s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/set_vars.yml:2 
fedora.linux_system_roles.auditd : Run augenrules ----------------------- 0.44s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/handlers/main.yml:3 
fedora.linux_system_roles.auditd : Discover files in rules.d ------------ 0.43s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:12 
Back up auditd.conf before test ----------------------------------------- 0.43s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:21 
Ensure rules.d backup parent directory is absent ------------------------ 0.42s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:16 
Check for existing auditd.conf ------------------------------------------ 0.42s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tasks/setup.yml:7 
fedora.linux_system_roles.auditd : Read existing custom.rules for comparison --- 0.42s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:23 
fedora.linux_system_roles.auditd : Ensure rules.d directory exists ------ 0.35s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/main.yml:22 
fedora.linux_system_roles.auditd : Stat existing custom.rules before purge --- 0.35s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:18 
fedora.linux_system_roles.auditd : Stat existing custom.rules before purge --- 0.34s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/roles/auditd/tasks/purge_rules.yml:18 
Recreate empty rules.d directory ---------------------------------------- 0.34s
/tmp/collections-EwS/ansible_collections/fedora/linux_system_roles/tests/auditd/tests_purge_rules.yml:140