Output of ansible playbook prints thousands lines about skipping files causing that run of a playbook can take even few hours.
TASK [Change owner to root on directories which are world writable] ************
skipping: [192.168.122.55] => (item={'path': '/boot', 'mode': '0555', 'isdir': True, 'ischr': False, 'isblk': False, 'isreg': False, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 0, 'gid': 0, 'size': 4096, 'inode': 128, 'dev': 64513, 'nlink': 5, 'atime': 1611862168.823, 'mtime': 1611862324.4097507, 'ctime': 1611862324.4097507, 'gr_name': 'root', 'pw_name': 'root', 'wusr': False, 'rusr': True, 'xusr': True, 'wgrp': False, 'rgrp': True, 'xgrp': True, 'woth': False, 'roth': True, 'xoth': True, 'isuid': False, 'isgid': False})
skipping: [192.168.122.55] => (item={'path': '/dev', 'mode': '0755', 'isdir': True, 'ischr': False, 'isblk': False, 'isreg': False, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 0, 'gid': 0, 'size': 3140, 'inode': 3, 'dev': 6, 'nlink': 19, 'atime': 1611862289.027, 'mtime': 1611862297.6147506, 'ctime': 1611862297.6147506, 'gr_name': 'root', 'pw_name': 'root', 'wusr': True, 'rusr': True, 'xusr': True, 'wgrp': False, 'rgrp': True, 'xgrp': True, 'woth': False, 'roth': True, 'xoth': True, 'isuid': False, 'isgid': False})
skipping: [192.168.122.55] => (item={'path': '/home', 'mode': '0755', 'isdir': True, 'ischr': False, 'isblk': False, 'isreg': False, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 0, 'gid': 0, 'size': 19, 'inode': 128, 'dev': 64778, 'nlink': 3, 'atime': 1611862178.598, 'mtime': 1611862190.589, 'ctime': 1611862294.419, 'gr_name': 'root', 'pw_name': 'root', 'wusr': True, 'rusr': True, 'xusr': True, 'wgrp': False, 'rgrp': True, 'xgrp': True, 'woth': False, 'roth': True, 'xoth': True, 'isuid': False, 'isgid': False})
skipping: [192.168.122.55] => (item={'path': '/opt', 'mode': '0755', 'isdir': True, 'ischr': False, 'isblk': False, 'isreg': False, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 0, 'gid': 0, 'size': 6, 'inode': 128, 'dev': 64776, 'nlink': 2, 'atime': 1611862178.913, 'mtime': 1587623156.0, 'ctime': 1611861858.423, 'gr_name': 'root', 'pw_name': 'root', 'wusr': True, 'rusr': True, 'xusr': True, 'wgrp': False, 'rgrp': True, 'xgrp': True, 'woth': False, 'roth': True, 'xoth': True, 'isuid': False, 'isgid': False})
Information about skipping files are not printed.
Description of problem:
Output of ansible playbook prints thousands lines about skipping files causing that run of a playbook can take even few hours.
SCAP Security Guide Version:
stabilization branch
Operating System Version:
RHEL 8.4
Steps to Reproduce:
ansible-playbook -e ansible_python_interpreter=/usr/bin/python3 --skip-tags ensure_gpgcheck_never_disabled,configure_opensc_nss_db --private-key=/root/.ssh/id_ecdsa -i "192.168.122.55," /usr/share/scap-security-guide/ansible/rhel8-playbook-anssi_bp28_enhanced.ymlActual Results:
Expected Results:
Information about skipping files are not printed.
See also: https://github.com/ComplianceAsCode/content/blob/master/linux_os/guide/system/permissions/files/dir_perms_world_writable_root_owned/ansible/shared.yml