content icon indicating copy to clipboard operation
content copied to clipboard

Ansible RHEL STIG usability issue w.r.t. task names

Open apteryks opened this issue 4 years ago • 0 comments

Description of problem:

Many tasks are nested in in Ansible 'block's. Unfortunately Ansible does not print out the block name, so for example all we see in the output for the DISA-STIG-RHEL-07-010300 associated block named "Disable SSH Access via Empty Passwords" is:

TASK [RedHatOfficial.rhel7_stig : Check for duplicate values] ******************************************************************************************************************************************************
ok: [hmg]

TASK [RedHatOfficial.rhel7_stig : Deduplicate values from /etc/ssh/sshd_config] ************************************************************************************************************************************
skipping: [hmg]

TASK [RedHatOfficial.rhel7_stig : Insert correct line to /etc/ssh/sshd_config] *************************************************************************************************************************************

Which is indifferentiable from the output of DISA-STIG-RHEL-07-010470 (the block named "Disable Host-Based Authentication").

Steps to Reproduce:

  1. Run the official redhatofficial.rhel7_stig playbook.

Actual Results:

See above.

Expected Results:

The block name should be part of the nested task name so they can be linked to the task block that emitted them. Also see: https://github.com/ComplianceAsCode/content/issues/7418

apteryks avatar Aug 20 '21 15:08 apteryks