# STDOUT: ---v---v---v---v---v--- ansible-playbook 2.9.27 config file = /etc/ansible/ansible.cfg configured module search path = ['/home/jenkins/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /opt/ansible-2.9/lib/python3.9/site-packages/ansible executable location = /opt/ansible-2.9/bin/ansible-playbook python version = 3.9.18 (main, Sep 7 2023, 00:00:00) [GCC 11.4.1 20230605 (Red Hat 11.4.1-2)] Using /etc/ansible/ansible.cfg as config file Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: tests_interface_pci.yml ********************************************** 1 plays in /WORKDIR/git-weekly-cissfaq497/tests/tests_interface_pci.yml PLAY [Test interfaces with PCI ids] ******************************************** TASK [Gathering Facts] ********************************************************* task path: /WORKDIR/git-weekly-cissfaq497/tests/tests_interface_pci.yml:3 Saturday 02 March 2024 05:47:53 +0000 (0:00:00.015) 0:00:00.015 ******** ok: [sut] META: ran handlers TASK [linux-system-roles.firewall : Setup firewalld] *************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:2 Saturday 02 March 2024 05:47:54 +0000 (0:00:00.591) 0:00:00.607 ******** included: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml for sut TASK [linux-system-roles.firewall : Ensure ansible_facts used by role] ********* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:2 Saturday 02 March 2024 05:47:54 +0000 (0:00:00.011) 0:00:00.618 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Check if system is ostree] ***************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:11 Saturday 02 March 2024 05:47:54 +0000 (0:00:00.022) 0:00:00.640 ******** ok: [sut] => { "changed": false, "stat": { "exists": false } } TASK [linux-system-roles.firewall : Set flag to indicate system is ostree] ***** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:16 Saturday 02 March 2024 05:47:54 +0000 (0:00:00.208) 0:00:00.849 ******** ok: [sut] => { "ansible_facts": { "__firewall_is_ostree": false }, "changed": false } TASK [linux-system-roles.firewall : Install firewalld] ************************* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:20 Saturday 02 March 2024 05:47:54 +0000 (0:00:00.019) 0:00:00.869 ******** ok: [sut] => { "changed": false, "rc": 0, "results": [ "firewalld-0.6.3-13.el7_9.noarch providing firewalld is already installed" ] } lsrpackages: firewalld TASK [linux-system-roles.firewall : Collect service facts] ********************* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:5 Saturday 02 March 2024 05:47:55 +0000 (0:00:00.477) 0:00:01.346 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Attempt to stop and disable conflicting services] *** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:9 Saturday 02 March 2024 05:47:55 +0000 (0:00:00.031) 0:00:01.378 ******** skipping: [sut] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Unmask firewalld service] ****************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:23 Saturday 02 March 2024 05:47:55 +0000 (0:00:00.022) 0:00:01.400 ******** ok: [sut] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ActiveEnterTimestampMonotonic": "1319604264", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.service system.slice basic.target polkit.service", "AllowIsolate": "no", "AmbientCapabilities": "0", "AssertResult": "yes", "AssertTimestamp": "Sat 2024-03-02 05:47:35 UTC", "AssertTimestampMonotonic": "1319083730", "Before": "shutdown.target network-pre.target multi-user.target", "BlockIOAccounting": "no", "BlockIOWeight": "18446744073709551615", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "18446744073709551615", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "18446744073709551615", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ConditionTimestampMonotonic": "1319083728", "Conflicts": "ipset.service ebtables.service ip6tables.service shutdown.target iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "11972", "ExecMainStartTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ExecMainStartTimestampMonotonic": "1319087678", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2024-03-02 05:47:35 UTC] ; stop_time=[n/a] ; pid=11972 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "GuessMainPID": "yes", "IOScheduling": "0", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreOnSnapshot": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sat 2024-03-02 05:47:35 UTC", "InactiveExitTimestampMonotonic": "1319087721", "JobTimeoutAction": "none", "JobTimeoutUSec": "0", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "18446744073709551615", "LimitCORE": "18446744073709551615", "LimitCPU": "18446744073709551615", "LimitDATA": "18446744073709551615", "LimitFSIZE": "18446744073709551615", "LimitLOCKS": "18446744073709551615", "LimitMEMLOCK": "65536", "LimitMSGQUEUE": "819200", "LimitNICE": "0", "LimitNOFILE": "4096", "LimitNPROC": "14311", "LimitRSS": "18446744073709551615", "LimitRTPRIO": "0", "LimitRTTIME": "18446744073709551615", "LimitSIGPENDING": "14311", "LimitSTACK": "18446744073709551615", "LoadState": "loaded", "MainPID": "11972", "MemoryAccounting": "no", "MemoryCurrent": "18446744073709551615", "MemoryLimit": "18446744073709551615", "MountFlags": "0", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "PrivateDevices": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "ProtectHome": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "Requires": "system.slice basic.target", "Restart": "no", "RestartUSec": "100ms", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitInterval": "10000000", "StartupBlockIOWeight": "18446744073709551615", "StartupCPUShares": "18446744073709551615", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "no", "TasksCurrent": "18446744073709551615", "TasksMax": "18446744073709551615", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Sat 2024-03-02 05:47:35 UTC", "WatchdogTimestampMonotonic": "1319604207", "WatchdogUSec": "0" } } TASK [linux-system-roles.firewall : Enable and start firewalld service] ******** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:29 Saturday 02 March 2024 05:47:55 +0000 (0:00:00.343) 0:00:01.744 ******** ok: [sut] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ActiveEnterTimestampMonotonic": "1319604264", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.service system.slice basic.target polkit.service", "AllowIsolate": "no", "AmbientCapabilities": "0", "AssertResult": "yes", "AssertTimestamp": "Sat 2024-03-02 05:47:35 UTC", "AssertTimestampMonotonic": "1319083730", "Before": "shutdown.target network-pre.target multi-user.target", "BlockIOAccounting": "no", "BlockIOWeight": "18446744073709551615", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "18446744073709551615", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "18446744073709551615", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ConditionTimestampMonotonic": "1319083728", "Conflicts": "ipset.service ebtables.service ip6tables.service shutdown.target iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "11972", "ExecMainStartTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ExecMainStartTimestampMonotonic": "1319087678", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2024-03-02 05:47:35 UTC] ; stop_time=[n/a] ; pid=11972 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "GuessMainPID": "yes", "IOScheduling": "0", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreOnSnapshot": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sat 2024-03-02 05:47:35 UTC", "InactiveExitTimestampMonotonic": "1319087721", "JobTimeoutAction": "none", "JobTimeoutUSec": "0", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "18446744073709551615", "LimitCORE": "18446744073709551615", "LimitCPU": "18446744073709551615", "LimitDATA": "18446744073709551615", "LimitFSIZE": "18446744073709551615", "LimitLOCKS": "18446744073709551615", "LimitMEMLOCK": "65536", "LimitMSGQUEUE": "819200", "LimitNICE": "0", "LimitNOFILE": "4096", "LimitNPROC": "14311", "LimitRSS": "18446744073709551615", "LimitRTPRIO": "0", "LimitRTTIME": "18446744073709551615", "LimitSIGPENDING": "14311", "LimitSTACK": "18446744073709551615", "LoadState": "loaded", "MainPID": "11972", "MemoryAccounting": "no", "MemoryCurrent": "18446744073709551615", "MemoryLimit": "18446744073709551615", "MountFlags": "0", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "PrivateDevices": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "ProtectHome": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "Requires": "system.slice basic.target", "Restart": "no", "RestartUSec": "100ms", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitInterval": "10000000", "StartupBlockIOWeight": "18446744073709551615", "StartupCPUShares": "18446744073709551615", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "no", "TasksCurrent": "18446744073709551615", "TasksMax": "18446744073709551615", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Sat 2024-03-02 05:47:35 UTC", "WatchdogTimestampMonotonic": "1319604207", "WatchdogUSec": "0" } } TASK [linux-system-roles.firewall : Check if previous replaced is defined] ***** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:35 Saturday 02 March 2024 05:47:55 +0000 (0:00:00.219) 0:00:01.963 ******** ok: [sut] => { "ansible_facts": { "__firewall_previous_replaced": false, "__firewall_python_cmd": "/usr/bin/python", "__firewall_report_changed": true }, "changed": false } TASK [linux-system-roles.firewall : Get config files, checksums before and remove] *** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:48 Saturday 02 March 2024 05:47:55 +0000 (0:00:00.020) 0:00:01.984 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Tell firewall module it is able to report changed] *** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:60 Saturday 02 March 2024 05:47:55 +0000 (0:00:00.017) 0:00:02.002 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Configure firewall] ************************ task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:77 Saturday 02 March 2024 05:47:55 +0000 (0:00:00.017) 0:00:02.019 ******** TASK [linux-system-roles.firewall : Gather firewall config information] ******** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:129 Saturday 02 March 2024 05:47:55 +0000 (0:00:00.017) 0:00:02.036 ******** TASK [linux-system-roles.firewall : Update firewalld_config fact] ************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:140 Saturday 02 March 2024 05:47:55 +0000 (0:00:00.016) 0:00:02.053 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Gather firewall config if no arguments] **** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:149 Saturday 02 March 2024 05:47:56 +0000 (0:00:00.016) 0:00:02.070 ******** ok: [sut] => { "changed": false, "firewall_config": { "custom": { "zones": { "public": { "description": "For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.", "forward_ports": [], "icmp_block_inversion": false, "icmp_blocks": [], "interfaces": [], "masqerade": false, "ports": [], "protocols": [], "rules_str": [], "services": [ "ssh", "dhcpv6-client" ], "short": "Public", "source_ports": [], "sources": [], "target": "default", "version": "" } } }, "default": { "helpers": [ "h323", "Q.931", "proto-gre", "sip", "sane", "tftp", "netbios-ns", "ftp", "snmp", "irc", "amanda", "RAS", "pptp" ], "icmptypes": [ "unknown-header-type", "reject-route", "echo-reply", "packet-too-big", "address-unreachable", "beyond-scope", "no-route", "ttl-zero-during-transit", "echo-request", "host-precedence-violation", "host-unreachable", "communication-prohibited", "source-route-failed", "network-unreachable", "timestamp-request", "protocol-unreachable", "network-prohibited", "redirect", "host-prohibited", "time-exceeded", "router-advertisement", "neighbour-solicitation", "port-unreachable", "tos-host-unreachable", "tos-host-redirect", "unknown-option", "ip-header-bad", "parameter-problem", "bad-header", "failed-policy", "precedence-cutoff", "host-redirect", "ttl-zero-during-reassembly", "destination-unreachable", "router-solicitation", "host-unknown", "source-quench", "neighbour-advertisement", "tos-network-unreachable", "timestamp-reply", "network-redirect", "network-unknown", "fragmentation-needed", "tos-network-redirect", "required-option-missing" ], "services": [ "xmpp-client", "bitcoin", "isns", "ipp-client", "kshell", "kerberos", "freeipa-replication", "smtp-submission", "jenkins", "libvirt", "ipsec", "bitcoin-testnet", "zabbix-server", "mongodb", "ovirt-imageio", "amqps", "ldaps", "tor-socks", "pmproxy", "upnp-client", "openvpn", "nut", "bitcoin-rpc", "rsyncd", "ircs", "ntp", "iscsi-target", "docker-swarm", "xmpp-bosh", "salt-master", "sip", "mysql", "audit", "nmea-0183", "bgp", "kpasswd", "pop3s", "wbem-http", "smtp", "xmpp-server", "pulseaudio", "mosh", "smtps", "zabbix-agent", "snmptrap", "syslog-tls", "distcc", "telnet", "dropbox-lansync", "sane", "RH-Satellite-6", "tftp-client", "minidlna", "radius", "libvirt-tls", "synergy", "tftp", "ms-wbt", "etcd-server", "puppetmaster", "svn", "tinc", "pop3", "privoxy", "mqtt-tls", "RH-Satellite-6-capsule", "high-availability", "https", "dns", "squid", "kprop", "nrpe", "ovirt-storageconsole", "samba-dc", "steam-streaming", "amanda-client", "http", "amanda-k5-client", "ftp", "syncthing-gui", "mssql", "ldap", "amqp", "xmpp-local", "svdrp", "bitcoin-testnet-rpc", "murmur", "wbem-https", "syncthing", "git", "quassel", "freeipa-ldaps", "ceph-mon", "bacula-client", "pmwebapis", "ptp", "samba", "transmission-client", "dhcpv6-client", "ganglia-master", "sips", "kadmin", "imaps", "cfengine", "snmp", "samba-client", "freeipa-trust", "syslog", "dhcp", "vnc-server", "nfs3", "spideroak-lansync", "wsman", "irc", "nfs", "rtsp", "matrix", "ssh", "rsh", "managesieve", "slp", "ctdb", "rpc-bind", "llmnr", "elasticsearch", "kibana", "klogin", "proxy-dhcp", "wsmans", "apcupsd", "xdmcp", "mqtt", "imap", "gre", "pmwebapi", "docker-registry", "dhcpv6", "mdns", "vdsm", "bacula", "postgresql", "plex", "redis", "lightning-network", "etcd-client", "freeipa-ldap", "finger", "ipp", "ceph", "mountd", "ovirt-vmconsole", "ganglia-client", "pmcd", "condor-collector" ], "zones": [ "external", "work", "drop", "trusted", "block", "public", "dmz", "home", "internal" ] }, "default_zone": "public" } } TASK [linux-system-roles.firewall : Update firewalld_config fact] ************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:154 Saturday 02 March 2024 05:47:56 +0000 (0:00:00.430) 0:00:02.500 ******** ok: [sut] => { "ansible_facts": { "firewall_config": { "custom": { "zones": { "public": { "description": "For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.", "forward_ports": [], "icmp_block_inversion": false, "icmp_blocks": [], "interfaces": [], "masqerade": false, "ports": [], "protocols": [], "rules_str": [], "services": [ "ssh", "dhcpv6-client" ], "short": "Public", "source_ports": [], "sources": [], "target": "default", "version": "" } } }, "default": { "helpers": [ "h323", "Q.931", "proto-gre", "sip", "sane", "tftp", "netbios-ns", "ftp", "snmp", "irc", "amanda", "RAS", "pptp" ], "icmptypes": [ "unknown-header-type", "reject-route", "echo-reply", "packet-too-big", "address-unreachable", "beyond-scope", "no-route", "ttl-zero-during-transit", "echo-request", "host-precedence-violation", "host-unreachable", "communication-prohibited", "source-route-failed", "network-unreachable", "timestamp-request", "protocol-unreachable", "network-prohibited", "redirect", "host-prohibited", "time-exceeded", "router-advertisement", "neighbour-solicitation", "port-unreachable", "tos-host-unreachable", "tos-host-redirect", "unknown-option", "ip-header-bad", "parameter-problem", "bad-header", "failed-policy", "precedence-cutoff", "host-redirect", "ttl-zero-during-reassembly", "destination-unreachable", "router-solicitation", "host-unknown", "source-quench", "neighbour-advertisement", "tos-network-unreachable", "timestamp-reply", "network-redirect", "network-unknown", "fragmentation-needed", "tos-network-redirect", "required-option-missing" ], "services": [ "xmpp-client", "bitcoin", "isns", "ipp-client", "kshell", "kerberos", "freeipa-replication", "smtp-submission", "jenkins", "libvirt", "ipsec", "bitcoin-testnet", "zabbix-server", "mongodb", "ovirt-imageio", "amqps", "ldaps", "tor-socks", "pmproxy", "upnp-client", "openvpn", "nut", "bitcoin-rpc", "rsyncd", "ircs", "ntp", "iscsi-target", "docker-swarm", "xmpp-bosh", "salt-master", "sip", "mysql", "audit", "nmea-0183", "bgp", "kpasswd", "pop3s", "wbem-http", "smtp", "xmpp-server", "pulseaudio", "mosh", "smtps", "zabbix-agent", "snmptrap", "syslog-tls", "distcc", "telnet", "dropbox-lansync", "sane", "RH-Satellite-6", "tftp-client", "minidlna", "radius", "libvirt-tls", "synergy", "tftp", "ms-wbt", "etcd-server", "puppetmaster", "svn", "tinc", "pop3", "privoxy", "mqtt-tls", "RH-Satellite-6-capsule", "high-availability", "https", "dns", "squid", "kprop", "nrpe", "ovirt-storageconsole", "samba-dc", "steam-streaming", "amanda-client", "http", "amanda-k5-client", "ftp", "syncthing-gui", "mssql", "ldap", "amqp", "xmpp-local", "svdrp", "bitcoin-testnet-rpc", "murmur", "wbem-https", "syncthing", "git", "quassel", "freeipa-ldaps", "ceph-mon", "bacula-client", "pmwebapis", "ptp", "samba", "transmission-client", "dhcpv6-client", "ganglia-master", "sips", "kadmin", "imaps", "cfengine", "snmp", "samba-client", "freeipa-trust", "syslog", "dhcp", "vnc-server", "nfs3", "spideroak-lansync", "wsman", "irc", "nfs", "rtsp", "matrix", "ssh", "rsh", "managesieve", "slp", "ctdb", "rpc-bind", "llmnr", "elasticsearch", "kibana", "klogin", "proxy-dhcp", "wsmans", "apcupsd", "xdmcp", "mqtt", "imap", "gre", "pmwebapi", "docker-registry", "dhcpv6", "mdns", "vdsm", "bacula", "postgresql", "plex", "redis", "lightning-network", "etcd-client", "freeipa-ldap", "finger", "ipp", "ceph", "mountd", "ovirt-vmconsole", "ganglia-client", "pmcd", "condor-collector" ], "zones": [ "external", "work", "drop", "trusted", "block", "public", "dmz", "home", "internal" ] }, "default_zone": "public" } }, "changed": false } TASK [linux-system-roles.firewall : Get config files, checksums after] ********* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:163 Saturday 02 March 2024 05:47:56 +0000 (0:00:00.022) 0:00:02.522 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Calculate what has changed] **************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:173 Saturday 02 March 2024 05:47:56 +0000 (0:00:00.016) 0:00:02.539 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Show diffs] ******************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:182 Saturday 02 March 2024 05:47:56 +0000 (0:00:00.016) 0:00:02.555 ******** skipping: [sut] => {} TASK [Get backend from dbus] *************************************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/tests_interface_pci.yml:10 Saturday 02 March 2024 05:47:56 +0000 (0:00:00.015) 0:00:02.571 ******** fatal: [sut]: FAILED! => { "changed": false, "cmd": [ "dbus-send", "--system", "--print-reply", "--type=method_call", "--dest=org.fedoraproject.FirewallD1", "/org/fedoraproject/FirewallD1/config", "org.freedesktop.DBus.Properties.Get", "string:org.fedoraproject.FirewallD1.config", "string:FirewallBackend" ], "delta": "0:00:00.194504", "end": "2024-03-02 05:47:56.874577", "rc": 1, "start": "2024-03-02 05:47:56.680073" } STDERR: Error org.freedesktop.DBus.Python.dbus.exceptions.DBusException: org.freedesktop.DBus.Error.InvalidArgs: Property 'FirewallBackend' does not exist MSG: non-zero return code ...ignoring TASK [Get backend from result] ************************************************* task path: /WORKDIR/git-weekly-cissfaq497/tests/tests_interface_pci.yml:22 Saturday 02 March 2024 05:47:56 +0000 (0:00:00.374) 0:00:02.946 ******** ok: [sut] => { "ansible_facts": { "nftables_backend": false }, "changed": false } TASK [Add pci device ethernet controller] ************************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/tests_interface_pci.yml:29 Saturday 02 March 2024 05:47:56 +0000 (0:00:00.019) 0:00:02.965 ******** TASK [linux-system-roles.firewall : Setup firewalld] *************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:2 Saturday 02 March 2024 05:47:56 +0000 (0:00:00.016) 0:00:02.981 ******** included: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml for sut TASK [linux-system-roles.firewall : Ensure ansible_facts used by role] ********* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:2 Saturday 02 March 2024 05:47:56 +0000 (0:00:00.010) 0:00:02.992 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Check if system is ostree] ***************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:11 Saturday 02 March 2024 05:47:56 +0000 (0:00:00.018) 0:00:03.011 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Set flag to indicate system is ostree] ***** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:16 Saturday 02 March 2024 05:47:56 +0000 (0:00:00.016) 0:00:03.028 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Install firewalld] ************************* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:20 Saturday 02 March 2024 05:47:56 +0000 (0:00:00.017) 0:00:03.045 ******** ok: [sut] => { "changed": false, "rc": 0, "results": [ "firewalld-0.6.3-13.el7_9.noarch providing firewalld is already installed" ] } lsrpackages: firewalld TASK [linux-system-roles.firewall : Collect service facts] ********************* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:5 Saturday 02 March 2024 05:47:57 +0000 (0:00:00.627) 0:00:03.673 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Attempt to stop and disable conflicting services] *** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:9 Saturday 02 March 2024 05:47:57 +0000 (0:00:00.017) 0:00:03.690 ******** skipping: [sut] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Unmask firewalld service] ****************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:23 Saturday 02 March 2024 05:47:57 +0000 (0:00:00.023) 0:00:03.713 ******** ok: [sut] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ActiveEnterTimestampMonotonic": "1319604264", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.service system.slice basic.target polkit.service", "AllowIsolate": "no", "AmbientCapabilities": "0", "AssertResult": "yes", "AssertTimestamp": "Sat 2024-03-02 05:47:35 UTC", "AssertTimestampMonotonic": "1319083730", "Before": "shutdown.target network-pre.target multi-user.target", "BlockIOAccounting": "no", "BlockIOWeight": "18446744073709551615", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "18446744073709551615", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "18446744073709551615", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ConditionTimestampMonotonic": "1319083728", "Conflicts": "ipset.service ebtables.service ip6tables.service shutdown.target iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "11972", "ExecMainStartTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ExecMainStartTimestampMonotonic": "1319087678", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2024-03-02 05:47:35 UTC] ; stop_time=[n/a] ; pid=11972 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "GuessMainPID": "yes", "IOScheduling": "0", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreOnSnapshot": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sat 2024-03-02 05:47:35 UTC", "InactiveExitTimestampMonotonic": "1319087721", "JobTimeoutAction": "none", "JobTimeoutUSec": "0", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "18446744073709551615", "LimitCORE": "18446744073709551615", "LimitCPU": "18446744073709551615", "LimitDATA": "18446744073709551615", "LimitFSIZE": "18446744073709551615", "LimitLOCKS": "18446744073709551615", "LimitMEMLOCK": "65536", "LimitMSGQUEUE": "819200", "LimitNICE": "0", "LimitNOFILE": "4096", "LimitNPROC": "14311", "LimitRSS": "18446744073709551615", "LimitRTPRIO": "0", "LimitRTTIME": "18446744073709551615", "LimitSIGPENDING": "14311", "LimitSTACK": "18446744073709551615", "LoadState": "loaded", "MainPID": "11972", "MemoryAccounting": "no", "MemoryCurrent": "18446744073709551615", "MemoryLimit": "18446744073709551615", "MountFlags": "0", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "PrivateDevices": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "ProtectHome": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "Requires": "system.slice basic.target", "Restart": "no", "RestartUSec": "100ms", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitInterval": "10000000", "StartupBlockIOWeight": "18446744073709551615", "StartupCPUShares": "18446744073709551615", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "no", "TasksCurrent": "18446744073709551615", "TasksMax": "18446744073709551615", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Sat 2024-03-02 05:47:35 UTC", "WatchdogTimestampMonotonic": "1319604207", "WatchdogUSec": "0" } } TASK [linux-system-roles.firewall : Enable and start firewalld service] ******** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:29 Saturday 02 March 2024 05:47:57 +0000 (0:00:00.227) 0:00:03.941 ******** ok: [sut] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ActiveEnterTimestampMonotonic": "1319604264", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.service system.slice basic.target polkit.service", "AllowIsolate": "no", "AmbientCapabilities": "0", "AssertResult": "yes", "AssertTimestamp": "Sat 2024-03-02 05:47:35 UTC", "AssertTimestampMonotonic": "1319083730", "Before": "shutdown.target network-pre.target multi-user.target", "BlockIOAccounting": "no", "BlockIOWeight": "18446744073709551615", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "18446744073709551615", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "18446744073709551615", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ConditionTimestampMonotonic": "1319083728", "Conflicts": "ipset.service ebtables.service ip6tables.service shutdown.target iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "11972", "ExecMainStartTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ExecMainStartTimestampMonotonic": "1319087678", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2024-03-02 05:47:35 UTC] ; stop_time=[n/a] ; pid=11972 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "GuessMainPID": "yes", "IOScheduling": "0", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreOnSnapshot": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sat 2024-03-02 05:47:35 UTC", "InactiveExitTimestampMonotonic": "1319087721", "JobTimeoutAction": "none", "JobTimeoutUSec": "0", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "18446744073709551615", "LimitCORE": "18446744073709551615", "LimitCPU": "18446744073709551615", "LimitDATA": "18446744073709551615", "LimitFSIZE": "18446744073709551615", "LimitLOCKS": "18446744073709551615", "LimitMEMLOCK": "65536", "LimitMSGQUEUE": "819200", "LimitNICE": "0", "LimitNOFILE": "4096", "LimitNPROC": "14311", "LimitRSS": "18446744073709551615", "LimitRTPRIO": "0", "LimitRTTIME": "18446744073709551615", "LimitSIGPENDING": "14311", "LimitSTACK": "18446744073709551615", "LoadState": "loaded", "MainPID": "11972", "MemoryAccounting": "no", "MemoryCurrent": "18446744073709551615", "MemoryLimit": "18446744073709551615", "MountFlags": "0", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "PrivateDevices": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "ProtectHome": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "Requires": "system.slice basic.target", "Restart": "no", "RestartUSec": "100ms", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitInterval": "10000000", "StartupBlockIOWeight": "18446744073709551615", "StartupCPUShares": "18446744073709551615", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "no", "TasksCurrent": "18446744073709551615", "TasksMax": "18446744073709551615", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Sat 2024-03-02 05:47:35 UTC", "WatchdogTimestampMonotonic": "1319604207", "WatchdogUSec": "0" } } TASK [linux-system-roles.firewall : Check if previous replaced is defined] ***** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:35 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.218) 0:00:04.159 ******** ok: [sut] => { "ansible_facts": { "__firewall_previous_replaced": false, "__firewall_python_cmd": "/usr/bin/python", "__firewall_report_changed": true }, "changed": false } TASK [linux-system-roles.firewall : Get config files, checksums before and remove] *** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:48 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.020) 0:00:04.180 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Tell firewall module it is able to report changed] *** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:60 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.017) 0:00:04.197 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Configure firewall] ************************ task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:77 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.017) 0:00:04.215 ******** ok: [sut] => (item={'zone': 'internal', 'interface_pci_id': '1af4:0001', 'state': 'enabled', 'permanent': True}) => { "__firewall_changed": false, "ansible_loop_var": "item", "changed": false, "item": { "interface_pci_id": "1af4:0001", "permanent": true, "state": "enabled", "zone": "internal" } } TASK [linux-system-roles.firewall : Gather firewall config information] ******** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:129 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.469) 0:00:04.684 ******** skipping: [sut] => (item={'zone': 'internal', 'interface_pci_id': '1af4:0001', 'state': 'enabled', 'permanent': True}) => { "ansible_loop_var": "item", "changed": false, "item": { "interface_pci_id": "1af4:0001", "permanent": true, "state": "enabled", "zone": "internal" }, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Update firewalld_config fact] ************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:140 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.024) 0:00:04.709 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Gather firewall config if no arguments] **** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:149 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.021) 0:00:04.730 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Update firewalld_config fact] ************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:154 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.034) 0:00:04.764 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Get config files, checksums after] ********* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:163 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.023) 0:00:04.787 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Calculate what has changed] **************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:173 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.031) 0:00:04.819 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Show diffs] ******************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:182 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.017) 0:00:04.836 ******** skipping: [sut] => {} TASK [Add pci device again] **************************************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/tests_interface_pci.yml:39 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.025) 0:00:04.862 ******** TASK [linux-system-roles.firewall : Setup firewalld] *************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:2 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.024) 0:00:04.887 ******** included: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml for sut TASK [linux-system-roles.firewall : Ensure ansible_facts used by role] ********* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:2 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.012) 0:00:04.899 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Check if system is ostree] ***************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:11 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.019) 0:00:04.919 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Set flag to indicate system is ostree] ***** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:16 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.028) 0:00:04.948 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Install firewalld] ************************* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:20 Saturday 02 March 2024 05:47:58 +0000 (0:00:00.033) 0:00:04.981 ******** ok: [sut] => { "changed": false, "rc": 0, "results": [ "firewalld-0.6.3-13.el7_9.noarch providing firewalld is already installed" ] } lsrpackages: firewalld TASK [linux-system-roles.firewall : Collect service facts] ********************* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:5 Saturday 02 March 2024 05:47:59 +0000 (0:00:00.409) 0:00:05.390 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Attempt to stop and disable conflicting services] *** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:9 Saturday 02 March 2024 05:47:59 +0000 (0:00:00.022) 0:00:05.413 ******** skipping: [sut] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Unmask firewalld service] ****************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:23 Saturday 02 March 2024 05:47:59 +0000 (0:00:00.027) 0:00:05.441 ******** ok: [sut] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ActiveEnterTimestampMonotonic": "1319604264", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.service system.slice basic.target polkit.service", "AllowIsolate": "no", "AmbientCapabilities": "0", "AssertResult": "yes", "AssertTimestamp": "Sat 2024-03-02 05:47:35 UTC", "AssertTimestampMonotonic": "1319083730", "Before": "shutdown.target network-pre.target multi-user.target", "BlockIOAccounting": "no", "BlockIOWeight": "18446744073709551615", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "18446744073709551615", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "18446744073709551615", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ConditionTimestampMonotonic": "1319083728", "Conflicts": "ipset.service ebtables.service ip6tables.service shutdown.target iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "11972", "ExecMainStartTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ExecMainStartTimestampMonotonic": "1319087678", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2024-03-02 05:47:35 UTC] ; stop_time=[n/a] ; pid=11972 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "GuessMainPID": "yes", "IOScheduling": "0", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreOnSnapshot": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sat 2024-03-02 05:47:35 UTC", "InactiveExitTimestampMonotonic": "1319087721", "JobTimeoutAction": "none", "JobTimeoutUSec": "0", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "18446744073709551615", "LimitCORE": "18446744073709551615", "LimitCPU": "18446744073709551615", "LimitDATA": "18446744073709551615", "LimitFSIZE": "18446744073709551615", "LimitLOCKS": "18446744073709551615", "LimitMEMLOCK": "65536", "LimitMSGQUEUE": "819200", "LimitNICE": "0", "LimitNOFILE": "4096", "LimitNPROC": "14311", "LimitRSS": "18446744073709551615", "LimitRTPRIO": "0", "LimitRTTIME": "18446744073709551615", "LimitSIGPENDING": "14311", "LimitSTACK": "18446744073709551615", "LoadState": "loaded", "MainPID": "11972", "MemoryAccounting": "no", "MemoryCurrent": "18446744073709551615", "MemoryLimit": "18446744073709551615", "MountFlags": "0", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "PrivateDevices": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "ProtectHome": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "Requires": "system.slice basic.target", "Restart": "no", "RestartUSec": "100ms", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitInterval": "10000000", "StartupBlockIOWeight": "18446744073709551615", "StartupCPUShares": "18446744073709551615", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "no", "TasksCurrent": "18446744073709551615", "TasksMax": "18446744073709551615", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Sat 2024-03-02 05:47:35 UTC", "WatchdogTimestampMonotonic": "1319604207", "WatchdogUSec": "0" } } TASK [linux-system-roles.firewall : Enable and start firewalld service] ******** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:29 Saturday 02 March 2024 05:47:59 +0000 (0:00:00.227) 0:00:05.669 ******** ok: [sut] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ActiveEnterTimestampMonotonic": "1319604264", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.service system.slice basic.target polkit.service", "AllowIsolate": "no", "AmbientCapabilities": "0", "AssertResult": "yes", "AssertTimestamp": "Sat 2024-03-02 05:47:35 UTC", "AssertTimestampMonotonic": "1319083730", "Before": "shutdown.target network-pre.target multi-user.target", "BlockIOAccounting": "no", "BlockIOWeight": "18446744073709551615", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "18446744073709551615", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "18446744073709551615", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ConditionTimestampMonotonic": "1319083728", "Conflicts": "ipset.service ebtables.service ip6tables.service shutdown.target iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "11972", "ExecMainStartTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ExecMainStartTimestampMonotonic": "1319087678", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2024-03-02 05:47:35 UTC] ; stop_time=[n/a] ; pid=11972 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "GuessMainPID": "yes", "IOScheduling": "0", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreOnSnapshot": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sat 2024-03-02 05:47:35 UTC", "InactiveExitTimestampMonotonic": "1319087721", "JobTimeoutAction": "none", "JobTimeoutUSec": "0", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "18446744073709551615", "LimitCORE": "18446744073709551615", "LimitCPU": "18446744073709551615", "LimitDATA": "18446744073709551615", "LimitFSIZE": "18446744073709551615", "LimitLOCKS": "18446744073709551615", "LimitMEMLOCK": "65536", "LimitMSGQUEUE": "819200", "LimitNICE": "0", "LimitNOFILE": "4096", "LimitNPROC": "14311", "LimitRSS": "18446744073709551615", "LimitRTPRIO": "0", "LimitRTTIME": "18446744073709551615", "LimitSIGPENDING": "14311", "LimitSTACK": "18446744073709551615", "LoadState": "loaded", "MainPID": "11972", "MemoryAccounting": "no", "MemoryCurrent": "18446744073709551615", "MemoryLimit": "18446744073709551615", "MountFlags": "0", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "PrivateDevices": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "ProtectHome": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "Requires": "system.slice basic.target", "Restart": "no", "RestartUSec": "100ms", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitInterval": "10000000", "StartupBlockIOWeight": "18446744073709551615", "StartupCPUShares": "18446744073709551615", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "no", "TasksCurrent": "18446744073709551615", "TasksMax": "18446744073709551615", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Sat 2024-03-02 05:47:35 UTC", "WatchdogTimestampMonotonic": "1319604207", "WatchdogUSec": "0" } } TASK [linux-system-roles.firewall : Check if previous replaced is defined] ***** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:35 Saturday 02 March 2024 05:47:59 +0000 (0:00:00.228) 0:00:05.897 ******** ok: [sut] => { "ansible_facts": { "__firewall_previous_replaced": false, "__firewall_python_cmd": "/usr/bin/python", "__firewall_report_changed": true }, "changed": false } TASK [linux-system-roles.firewall : Get config files, checksums before and remove] *** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:48 Saturday 02 March 2024 05:47:59 +0000 (0:00:00.023) 0:00:05.921 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Tell firewall module it is able to report changed] *** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:60 Saturday 02 March 2024 05:47:59 +0000 (0:00:00.021) 0:00:05.942 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Configure firewall] ************************ task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:77 Saturday 02 March 2024 05:47:59 +0000 (0:00:00.021) 0:00:05.964 ******** ok: [sut] => (item={'zone': 'internal', 'interface_pci_id': '1af4:0001', 'state': 'enabled', 'permanent': True}) => { "__firewall_changed": false, "ansible_loop_var": "item", "changed": false, "item": { "interface_pci_id": "1af4:0001", "permanent": true, "state": "enabled", "zone": "internal" } } TASK [linux-system-roles.firewall : Gather firewall config information] ******** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:129 Saturday 02 March 2024 05:48:00 +0000 (0:00:00.419) 0:00:06.383 ******** skipping: [sut] => (item={'zone': 'internal', 'interface_pci_id': '1af4:0001', 'state': 'enabled', 'permanent': True}) => { "ansible_loop_var": "item", "changed": false, "item": { "interface_pci_id": "1af4:0001", "permanent": true, "state": "enabled", "zone": "internal" }, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Update firewalld_config fact] ************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:140 Saturday 02 March 2024 05:48:00 +0000 (0:00:00.024) 0:00:06.408 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Gather firewall config if no arguments] **** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:149 Saturday 02 March 2024 05:48:00 +0000 (0:00:00.019) 0:00:06.427 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Update firewalld_config fact] ************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:154 Saturday 02 March 2024 05:48:00 +0000 (0:00:00.018) 0:00:06.445 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Get config files, checksums after] ********* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:163 Saturday 02 March 2024 05:48:00 +0000 (0:00:00.025) 0:00:06.471 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Calculate what has changed] **************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:173 Saturday 02 March 2024 05:48:00 +0000 (0:00:00.018) 0:00:06.489 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Show diffs] ******************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:182 Saturday 02 March 2024 05:48:00 +0000 (0:00:00.018) 0:00:06.508 ******** skipping: [sut] => {} TASK [Assert pcid not in nftable ruleset] ************************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/tests_interface_pci.yml:49 Saturday 02 March 2024 05:48:00 +0000 (0:00:00.018) 0:00:06.527 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Assert pcid not in iptables rules] *************************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/tests_interface_pci.yml:56 Saturday 02 March 2024 05:48:00 +0000 (0:00:00.017) 0:00:06.544 ******** ok: [sut] => { "changed": false, "cmd": [ "iptables", "-S" ], "delta": "0:00:00.005695", "end": "2024-03-02 05:48:00.618768", "failed_when_result": false, "rc": 0, "start": "2024-03-02 05:48:00.613073" } STDOUT: -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT -N FORWARD_IN_ZONES -N FORWARD_IN_ZONES_SOURCE -N FORWARD_OUT_ZONES -N FORWARD_OUT_ZONES_SOURCE -N FORWARD_direct -N FWDI_public -N FWDI_public_allow -N FWDI_public_deny -N FWDI_public_log -N FWDO_public -N FWDO_public_allow -N FWDO_public_deny -N FWDO_public_log -N INPUT_ZONES -N INPUT_ZONES_SOURCE -N INPUT_direct -N IN_public -N IN_public_allow -N IN_public_deny -N IN_public_log -N OUTPUT_direct -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j INPUT_direct -A INPUT -j INPUT_ZONES_SOURCE -A INPUT -j INPUT_ZONES -A INPUT -m conntrack --ctstate INVALID -j DROP -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i lo -j ACCEPT -A FORWARD -j FORWARD_direct -A FORWARD -j FORWARD_IN_ZONES_SOURCE -A FORWARD -j FORWARD_IN_ZONES -A FORWARD -j FORWARD_OUT_ZONES_SOURCE -A FORWARD -j FORWARD_OUT_ZONES -A FORWARD -m conntrack --ctstate INVALID -j DROP -A FORWARD -j REJECT --reject-with icmp-host-prohibited -A OUTPUT -o lo -j ACCEPT -A OUTPUT -j OUTPUT_direct -A FORWARD_IN_ZONES -i eth0 -g FWDI_public -A FORWARD_IN_ZONES -g FWDI_public -A FORWARD_OUT_ZONES -o eth0 -g FWDO_public -A FORWARD_OUT_ZONES -g FWDO_public -A FWDI_public -j FWDI_public_log -A FWDI_public -j FWDI_public_deny -A FWDI_public -j FWDI_public_allow -A FWDI_public -p icmp -j ACCEPT -A FWDO_public -j FWDO_public_log -A FWDO_public -j FWDO_public_deny -A FWDO_public -j FWDO_public_allow -A INPUT_ZONES -i eth0 -g IN_public -A INPUT_ZONES -g IN_public -A IN_public -j IN_public_log -A IN_public -j IN_public_deny -A IN_public -j IN_public_allow -A IN_public -p icmp -j ACCEPT -A IN_public_allow -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW,UNTRACKED -j ACCEPT TASK [Remove interface from internal] ****************************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/tests_interface_pci.yml:63 Saturday 02 March 2024 05:48:00 +0000 (0:00:00.147) 0:00:06.692 ******** TASK [linux-system-roles.firewall : Setup firewalld] *************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:2 Saturday 02 March 2024 05:48:00 +0000 (0:00:00.028) 0:00:06.721 ******** included: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml for sut TASK [linux-system-roles.firewall : Ensure ansible_facts used by role] ********* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:2 Saturday 02 March 2024 05:48:00 +0000 (0:00:00.014) 0:00:06.735 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Check if system is ostree] ***************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:11 Saturday 02 March 2024 05:48:00 +0000 (0:00:00.022) 0:00:06.758 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Set flag to indicate system is ostree] ***** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:16 Saturday 02 March 2024 05:48:00 +0000 (0:00:00.041) 0:00:06.800 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Install firewalld] ************************* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:20 Saturday 02 March 2024 05:48:00 +0000 (0:00:00.020) 0:00:06.820 ******** ok: [sut] => { "changed": false, "rc": 0, "results": [ "firewalld-0.6.3-13.el7_9.noarch providing firewalld is already installed" ] } lsrpackages: firewalld TASK [linux-system-roles.firewall : Collect service facts] ********************* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:5 Saturday 02 March 2024 05:48:01 +0000 (0:00:00.412) 0:00:07.233 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Attempt to stop and disable conflicting services] *** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:9 Saturday 02 March 2024 05:48:01 +0000 (0:00:00.017) 0:00:07.250 ******** skipping: [sut] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Unmask firewalld service] ****************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:23 Saturday 02 March 2024 05:48:01 +0000 (0:00:00.024) 0:00:07.274 ******** ok: [sut] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ActiveEnterTimestampMonotonic": "1319604264", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.service system.slice basic.target polkit.service", "AllowIsolate": "no", "AmbientCapabilities": "0", "AssertResult": "yes", "AssertTimestamp": "Sat 2024-03-02 05:47:35 UTC", "AssertTimestampMonotonic": "1319083730", "Before": "shutdown.target network-pre.target multi-user.target", "BlockIOAccounting": "no", "BlockIOWeight": "18446744073709551615", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "18446744073709551615", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "18446744073709551615", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ConditionTimestampMonotonic": "1319083728", "Conflicts": "ipset.service ebtables.service ip6tables.service shutdown.target iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "11972", "ExecMainStartTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ExecMainStartTimestampMonotonic": "1319087678", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2024-03-02 05:47:35 UTC] ; stop_time=[n/a] ; pid=11972 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "GuessMainPID": "yes", "IOScheduling": "0", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreOnSnapshot": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sat 2024-03-02 05:47:35 UTC", "InactiveExitTimestampMonotonic": "1319087721", "JobTimeoutAction": "none", "JobTimeoutUSec": "0", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "18446744073709551615", "LimitCORE": "18446744073709551615", "LimitCPU": "18446744073709551615", "LimitDATA": "18446744073709551615", "LimitFSIZE": "18446744073709551615", "LimitLOCKS": "18446744073709551615", "LimitMEMLOCK": "65536", "LimitMSGQUEUE": "819200", "LimitNICE": "0", "LimitNOFILE": "4096", "LimitNPROC": "14311", "LimitRSS": "18446744073709551615", "LimitRTPRIO": "0", "LimitRTTIME": "18446744073709551615", "LimitSIGPENDING": "14311", "LimitSTACK": "18446744073709551615", "LoadState": "loaded", "MainPID": "11972", "MemoryAccounting": "no", "MemoryCurrent": "18446744073709551615", "MemoryLimit": "18446744073709551615", "MountFlags": "0", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "PrivateDevices": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "ProtectHome": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "Requires": "system.slice basic.target", "Restart": "no", "RestartUSec": "100ms", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitInterval": "10000000", "StartupBlockIOWeight": "18446744073709551615", "StartupCPUShares": "18446744073709551615", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "no", "TasksCurrent": "18446744073709551615", "TasksMax": "18446744073709551615", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Sat 2024-03-02 05:47:35 UTC", "WatchdogTimestampMonotonic": "1319604207", "WatchdogUSec": "0" } } TASK [linux-system-roles.firewall : Enable and start firewalld service] ******** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:29 Saturday 02 March 2024 05:48:01 +0000 (0:00:00.221) 0:00:07.496 ******** ok: [sut] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ActiveEnterTimestampMonotonic": "1319604264", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.service system.slice basic.target polkit.service", "AllowIsolate": "no", "AmbientCapabilities": "0", "AssertResult": "yes", "AssertTimestamp": "Sat 2024-03-02 05:47:35 UTC", "AssertTimestampMonotonic": "1319083730", "Before": "shutdown.target network-pre.target multi-user.target", "BlockIOAccounting": "no", "BlockIOWeight": "18446744073709551615", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "18446744073709551615", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "18446744073709551615", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ConditionTimestampMonotonic": "1319083728", "Conflicts": "ipset.service ebtables.service ip6tables.service shutdown.target iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "11972", "ExecMainStartTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ExecMainStartTimestampMonotonic": "1319087678", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2024-03-02 05:47:35 UTC] ; stop_time=[n/a] ; pid=11972 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "GuessMainPID": "yes", "IOScheduling": "0", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreOnSnapshot": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sat 2024-03-02 05:47:35 UTC", "InactiveExitTimestampMonotonic": "1319087721", "JobTimeoutAction": "none", "JobTimeoutUSec": "0", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "18446744073709551615", "LimitCORE": "18446744073709551615", "LimitCPU": "18446744073709551615", "LimitDATA": "18446744073709551615", "LimitFSIZE": "18446744073709551615", "LimitLOCKS": "18446744073709551615", "LimitMEMLOCK": "65536", "LimitMSGQUEUE": "819200", "LimitNICE": "0", "LimitNOFILE": "4096", "LimitNPROC": "14311", "LimitRSS": "18446744073709551615", "LimitRTPRIO": "0", "LimitRTTIME": "18446744073709551615", "LimitSIGPENDING": "14311", "LimitSTACK": "18446744073709551615", "LoadState": "loaded", "MainPID": "11972", "MemoryAccounting": "no", "MemoryCurrent": "18446744073709551615", "MemoryLimit": "18446744073709551615", "MountFlags": "0", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "PrivateDevices": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "ProtectHome": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "Requires": "system.slice basic.target", "Restart": "no", "RestartUSec": "100ms", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitInterval": "10000000", "StartupBlockIOWeight": "18446744073709551615", "StartupCPUShares": "18446744073709551615", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "no", "TasksCurrent": "18446744073709551615", "TasksMax": "18446744073709551615", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Sat 2024-03-02 05:47:35 UTC", "WatchdogTimestampMonotonic": "1319604207", "WatchdogUSec": "0" } } TASK [linux-system-roles.firewall : Check if previous replaced is defined] ***** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:35 Saturday 02 March 2024 05:48:01 +0000 (0:00:00.219) 0:00:07.716 ******** ok: [sut] => { "ansible_facts": { "__firewall_previous_replaced": false, "__firewall_python_cmd": "/usr/bin/python", "__firewall_report_changed": true }, "changed": false } TASK [linux-system-roles.firewall : Get config files, checksums before and remove] *** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:48 Saturday 02 March 2024 05:48:01 +0000 (0:00:00.020) 0:00:07.737 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Tell firewall module it is able to report changed] *** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:60 Saturday 02 March 2024 05:48:01 +0000 (0:00:00.017) 0:00:07.754 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Configure firewall] ************************ task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:77 Saturday 02 March 2024 05:48:01 +0000 (0:00:00.017) 0:00:07.771 ******** ok: [sut] => (item={'zone': 'internal', 'interface_pci_id': '1af4:0001', 'state': 'disabled', 'permament': True}) => { "__firewall_changed": false, "ansible_loop_var": "item", "changed": false, "item": { "interface_pci_id": "1af4:0001", "permament": true, "state": "disabled", "zone": "internal" } } TASK [linux-system-roles.firewall : Gather firewall config information] ******** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:129 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.410) 0:00:08.181 ******** skipping: [sut] => (item={'zone': 'internal', 'interface_pci_id': '1af4:0001', 'state': 'disabled', 'permament': True}) => { "ansible_loop_var": "item", "changed": false, "item": { "interface_pci_id": "1af4:0001", "permament": true, "state": "disabled", "zone": "internal" }, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Update firewalld_config fact] ************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:140 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.025) 0:00:08.206 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Gather firewall config if no arguments] **** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:149 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.021) 0:00:08.228 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Update firewalld_config fact] ************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:154 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.017) 0:00:08.246 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Get config files, checksums after] ********* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:163 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.018) 0:00:08.265 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Calculate what has changed] **************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:173 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.018) 0:00:08.283 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Show diffs] ******************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:182 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.017) 0:00:08.300 ******** skipping: [sut] => {} TASK [Cleanup] ***************************************************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/tests_interface_pci.yml:73 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.018) 0:00:08.319 ******** TASK [linux-system-roles.firewall : Setup firewalld] *************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:2 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.031) 0:00:08.351 ******** included: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml for sut TASK [linux-system-roles.firewall : Ensure ansible_facts used by role] ********* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:2 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.011) 0:00:08.362 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Check if system is ostree] ***************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:11 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.020) 0:00:08.383 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Set flag to indicate system is ostree] ***** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:16 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.020) 0:00:08.403 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Install firewalld] ************************* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:20 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.018) 0:00:08.422 ******** ok: [sut] => { "changed": false, "rc": 0, "results": [ "firewalld-0.6.3-13.el7_9.noarch providing firewalld is already installed" ] } lsrpackages: firewalld TASK [linux-system-roles.firewall : Collect service facts] ********************* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:5 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.425) 0:00:08.847 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Attempt to stop and disable conflicting services] *** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:9 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.017) 0:00:08.864 ******** skipping: [sut] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [sut] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Unmask firewalld service] ****************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:23 Saturday 02 March 2024 05:48:02 +0000 (0:00:00.022) 0:00:08.887 ******** ok: [sut] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ActiveEnterTimestampMonotonic": "1319604264", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.service system.slice basic.target polkit.service", "AllowIsolate": "no", "AmbientCapabilities": "0", "AssertResult": "yes", "AssertTimestamp": "Sat 2024-03-02 05:47:35 UTC", "AssertTimestampMonotonic": "1319083730", "Before": "shutdown.target network-pre.target multi-user.target", "BlockIOAccounting": "no", "BlockIOWeight": "18446744073709551615", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "18446744073709551615", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "18446744073709551615", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ConditionTimestampMonotonic": "1319083728", "Conflicts": "ipset.service ebtables.service ip6tables.service shutdown.target iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "11972", "ExecMainStartTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ExecMainStartTimestampMonotonic": "1319087678", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2024-03-02 05:47:35 UTC] ; stop_time=[n/a] ; pid=11972 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "GuessMainPID": "yes", "IOScheduling": "0", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreOnSnapshot": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sat 2024-03-02 05:47:35 UTC", "InactiveExitTimestampMonotonic": "1319087721", "JobTimeoutAction": "none", "JobTimeoutUSec": "0", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "18446744073709551615", "LimitCORE": "18446744073709551615", "LimitCPU": "18446744073709551615", "LimitDATA": "18446744073709551615", "LimitFSIZE": "18446744073709551615", "LimitLOCKS": "18446744073709551615", "LimitMEMLOCK": "65536", "LimitMSGQUEUE": "819200", "LimitNICE": "0", "LimitNOFILE": "4096", "LimitNPROC": "14311", "LimitRSS": "18446744073709551615", "LimitRTPRIO": "0", "LimitRTTIME": "18446744073709551615", "LimitSIGPENDING": "14311", "LimitSTACK": "18446744073709551615", "LoadState": "loaded", "MainPID": "11972", "MemoryAccounting": "no", "MemoryCurrent": "18446744073709551615", "MemoryLimit": "18446744073709551615", "MountFlags": "0", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "PrivateDevices": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "ProtectHome": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "Requires": "system.slice basic.target", "Restart": "no", "RestartUSec": "100ms", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitInterval": "10000000", "StartupBlockIOWeight": "18446744073709551615", "StartupCPUShares": "18446744073709551615", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "no", "TasksCurrent": "18446744073709551615", "TasksMax": "18446744073709551615", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Sat 2024-03-02 05:47:35 UTC", "WatchdogTimestampMonotonic": "1319604207", "WatchdogUSec": "0" } } TASK [linux-system-roles.firewall : Enable and start firewalld service] ******** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:29 Saturday 02 March 2024 05:48:03 +0000 (0:00:00.236) 0:00:09.123 ******** ok: [sut] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ActiveEnterTimestampMonotonic": "1319604264", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.service system.slice basic.target polkit.service", "AllowIsolate": "no", "AmbientCapabilities": "0", "AssertResult": "yes", "AssertTimestamp": "Sat 2024-03-02 05:47:35 UTC", "AssertTimestampMonotonic": "1319083730", "Before": "shutdown.target network-pre.target multi-user.target", "BlockIOAccounting": "no", "BlockIOWeight": "18446744073709551615", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "18446744073709551615", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "18446744073709551615", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ConditionTimestampMonotonic": "1319083728", "Conflicts": "ipset.service ebtables.service ip6tables.service shutdown.target iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "11972", "ExecMainStartTimestamp": "Sat 2024-03-02 05:47:35 UTC", "ExecMainStartTimestampMonotonic": "1319087678", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2024-03-02 05:47:35 UTC] ; stop_time=[n/a] ; pid=11972 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "GuessMainPID": "yes", "IOScheduling": "0", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreOnSnapshot": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sat 2024-03-02 05:47:35 UTC", "InactiveExitTimestampMonotonic": "1319087721", "JobTimeoutAction": "none", "JobTimeoutUSec": "0", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "18446744073709551615", "LimitCORE": "18446744073709551615", "LimitCPU": "18446744073709551615", "LimitDATA": "18446744073709551615", "LimitFSIZE": "18446744073709551615", "LimitLOCKS": "18446744073709551615", "LimitMEMLOCK": "65536", "LimitMSGQUEUE": "819200", "LimitNICE": "0", "LimitNOFILE": "4096", "LimitNPROC": "14311", "LimitRSS": "18446744073709551615", "LimitRTPRIO": "0", "LimitRTTIME": "18446744073709551615", "LimitSIGPENDING": "14311", "LimitSTACK": "18446744073709551615", "LoadState": "loaded", "MainPID": "11972", "MemoryAccounting": "no", "MemoryCurrent": "18446744073709551615", "MemoryLimit": "18446744073709551615", "MountFlags": "0", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "PrivateDevices": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "ProtectHome": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "Requires": "system.slice basic.target", "Restart": "no", "RestartUSec": "100ms", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitInterval": "10000000", "StartupBlockIOWeight": "18446744073709551615", "StartupCPUShares": "18446744073709551615", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "no", "TasksCurrent": "18446744073709551615", "TasksMax": "18446744073709551615", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Sat 2024-03-02 05:47:35 UTC", "WatchdogTimestampMonotonic": "1319604207", "WatchdogUSec": "0" } } TASK [linux-system-roles.firewall : Check if previous replaced is defined] ***** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:35 Saturday 02 March 2024 05:48:03 +0000 (0:00:00.237) 0:00:09.361 ******** ok: [sut] => { "ansible_facts": { "__firewall_previous_replaced": true, "__firewall_python_cmd": "/usr/bin/python", "__firewall_report_changed": true }, "changed": false } TASK [linux-system-roles.firewall : Get config files, checksums before and remove] *** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:48 Saturday 02 March 2024 05:48:03 +0000 (0:00:00.020) 0:00:09.382 ******** ok: [sut] => { "changed": false, "rc": 0 } STDOUT: 8697e89439a0fde2df034ef3bfeb3a9558529194c459826162be809a2f08e773 /etc/firewalld/lockdown-whitelist.xml 65a9e4a0653b58f6808edcf6d432f6676485af237e73cb7adaabab4df3fac7bc /etc/firewalld/firewalld.conf STDERR: Shared connection to 10.31.45.186 closed. TASK [linux-system-roles.firewall : Tell firewall module it is able to report changed] *** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:60 Saturday 02 March 2024 05:48:05 +0000 (0:00:01.675) 0:00:11.057 ******** ok: [sut] => { "ansible_facts": { "__firewall_report_changed": false }, "changed": false } TASK [linux-system-roles.firewall : Configure firewall] ************************ task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:77 Saturday 02 March 2024 05:48:05 +0000 (0:00:00.020) 0:00:11.077 ******** TASK [linux-system-roles.firewall : Gather firewall config information] ******** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:129 Saturday 02 March 2024 05:48:05 +0000 (0:00:00.018) 0:00:11.096 ******** TASK [linux-system-roles.firewall : Update firewalld_config fact] ************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:140 Saturday 02 March 2024 05:48:05 +0000 (0:00:00.018) 0:00:11.114 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Gather firewall config if no arguments] **** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:149 Saturday 02 March 2024 05:48:05 +0000 (0:00:00.019) 0:00:11.133 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Update firewalld_config fact] ************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:154 Saturday 02 March 2024 05:48:05 +0000 (0:00:00.017) 0:00:11.151 ******** skipping: [sut] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.firewall : Get config files, checksums after] ********* task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:163 Saturday 02 March 2024 05:48:05 +0000 (0:00:00.018) 0:00:11.169 ******** ok: [sut] => { "changed": false, "rc": 0 } STDOUT: 65a9e4a0653b58f6808edcf6d432f6676485af237e73cb7adaabab4df3fac7bc /etc/firewalld/firewalld.conf STDERR: Shared connection to 10.31.45.186 closed. TASK [linux-system-roles.firewall : Calculate what has changed] **************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:173 Saturday 02 March 2024 05:48:05 +0000 (0:00:00.322) 0:00:11.492 ******** changed: [sut] => { "ansible_facts": { "firewall_lib_result": { "changed": true } }, "changed": true } TASK [linux-system-roles.firewall : Show diffs] ******************************** task path: /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:182 Saturday 02 March 2024 05:48:05 +0000 (0:00:00.022) 0:00:11.515 ******** skipping: [sut] => {} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* sut : ok=40 changed=1 unreachable=0 failed=0 skipped=65 rescued=0 ignored=1 Saturday 02 March 2024 05:48:05 +0000 (0:00:00.017) 0:00:11.533 ******** =============================================================================== linux-system-roles.firewall : Get config files, checksums before and remove --- 1.68s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:48 linux-system-roles.firewall : Configure firewall ------------------------ 0.89s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:77 linux-system-roles.firewall : Install firewalld ------------------------- 0.63s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:20 Gathering Facts --------------------------------------------------------- 0.59s /WORKDIR/git-weekly-cissfaq497/tests/tests_interface_pci.yml:3 ---------------- linux-system-roles.firewall : Install firewalld ------------------------- 0.48s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:20 linux-system-roles.firewall : Unmask firewalld service ------------------ 0.46s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:23 linux-system-roles.firewall : Enable and start firewalld service -------- 0.45s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:29 linux-system-roles.firewall : Gather firewall config if no arguments ---- 0.43s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:149 linux-system-roles.firewall : Install firewalld ------------------------- 0.43s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:20 linux-system-roles.firewall : Install firewalld ------------------------- 0.41s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:20 linux-system-roles.firewall : Configure firewall ------------------------ 0.41s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:77 linux-system-roles.firewall : Install firewalld ------------------------- 0.41s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/firewalld.yml:20 Get backend from dbus --------------------------------------------------- 0.37s /WORKDIR/git-weekly-cissfaq497/tests/tests_interface_pci.yml:10 --------------- linux-system-roles.firewall : Unmask firewalld service ------------------ 0.34s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:23 linux-system-roles.firewall : Get config files, checksums after --------- 0.32s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:163 linux-system-roles.firewall : Enable and start firewalld service -------- 0.24s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:29 linux-system-roles.firewall : Unmask firewalld service ------------------ 0.24s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:23 linux-system-roles.firewall : Unmask firewalld service ------------------ 0.22s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:23 linux-system-roles.firewall : Enable and start firewalld service -------- 0.22s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:29 linux-system-roles.firewall : Enable and start firewalld service -------- 0.22s /WORKDIR/git-weekly-cissfaq497/tests/roles/linux-system-roles.firewall/tasks/main.yml:29 ---^---^---^---^---^--- # STDERR: ---v---v---v---v---v--- ---^---^---^---^---^---