)]}'
{"openstack-ansible-security/tasks/auditd.yml":[{"author":{"_account_id":7307,"name":"Matt Thompson","email":"mattt@defunct.ca","username":"mattt416"},"change_message_id":"7c1de02e9311fd5a08ffacd7e884d0ef3e8b9ea5","unresolved":false,"context_lines":[{"line_number":95,"context_line":"# Ubuntu 14.04 sets these to 0400 by default, so we will stick with that since"},{"line_number":96,"context_line":"# it exceeds the STIG\u0027s requirements."},{"line_number":97,"context_line":"- name: V-38498 - Audit log files must have mode 0640 or less"},{"line_number":98,"context_line":"  command: find /var/log/audit/ -type f -exec chmod -v 0400 {} \\;"},{"line_number":99,"context_line":"  register: v38498_result"},{"line_number":100,"context_line":"  changed_when: \"\u0027changed\u0027 in v38498_result.stdout\""},{"line_number":101,"context_line":"  tags:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"7a2fa921_ff27afb3","line":98,"updated":"2015-10-08 15:56:32.000000000","message":"Can you use file module instead?","commit_id":"777e275b9cdd419f3ec2b84bf06724efe670c536"}],"tasks/auditd.yml":[{"author":{"_account_id":7307,"name":"Matt Thompson","email":"mattt@defunct.ca","username":"mattt416"},"change_message_id":"4ce29c6d773978480fddafa89807f8dcd656e11a","unresolved":false,"context_lines":[{"line_number":131,"context_line":"# Ubuntu 14.04 sets these to 0400 by default, so we will stick with that since"},{"line_number":132,"context_line":"# it exceeds the STIG\u0027s requirements."},{"line_number":133,"context_line":"- name: V-38498 - Audit log files must have mode 0640 or less"},{"line_number":134,"context_line":"  command: find /var/log/audit/ -type f -exec chmod -v 0400 {} \\;"},{"line_number":135,"context_line":"  register: v38498_result"},{"line_number":136,"context_line":"  changed_when: \"\u0027changed\u0027 in v38498_result.stdout\""},{"line_number":137,"context_line":"  tags:"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"7a2fa921_48882471","line":134,"updated":"2015-10-09 21:32:29.000000000","message":"Still think file module here would more appropriate (assuming it can do this).","commit_id":"df89918ad64a826dc1af8544a0e695ae752d396f"},{"author":{"_account_id":14288,"name":"Matthew Thode","display_name":"prometheanfire","email":"mthode@mthode.org","username":"prometheanfire"},"change_message_id":"a2f30f7e4eae86460e578b50353e8943020ef55a","unresolved":false,"context_lines":[{"line_number":128,"context_line":"    - cat2"},{"line_number":129,"context_line":"    - V-38495"},{"line_number":130,"context_line":""},{"line_number":131,"context_line":"# TODO: The \u0027find\u0027 module in Ansible 2 should make this avoid using \u0027shell\u0027."},{"line_number":132,"context_line":"- name: Get a list of audit logs in the auditd directory (for V-38498)"},{"line_number":133,"context_line":"  shell: ls /var/log/audit/"},{"line_number":134,"context_line":"  register: v38498_result"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"7a2fa921_e007b9c7","line":131,"updated":"2015-10-10 21:23:10.000000000","message":"try to avoid todo items","commit_id":"5d950d632d36e493ae474a7198c9fb78affbe949"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"6c7a70a96f761d9f3894b4de9ac65f000d4d5739","unresolved":false,"context_lines":[{"line_number":128,"context_line":"    - cat2"},{"line_number":129,"context_line":"    - V-38495"},{"line_number":130,"context_line":""},{"line_number":131,"context_line":"# TODO: The \u0027find\u0027 module in Ansible 2 should make this avoid using \u0027shell\u0027."},{"line_number":132,"context_line":"- name: Get a list of audit logs in the auditd directory (for V-38498)"},{"line_number":133,"context_line":"  shell: ls /var/log/audit/"},{"line_number":134,"context_line":"  register: v38498_result"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"7a2fa921_369bb874","line":131,"in_reply_to":"7a2fa921_e007b9c7","updated":"2015-10-11 15:11:31.000000000","message":"Okay. Will remove.","commit_id":"5d950d632d36e493ae474a7198c9fb78affbe949"},{"author":{"_account_id":14288,"name":"Matthew Thode","display_name":"prometheanfire","email":"mthode@mthode.org","username":"prometheanfire"},"change_message_id":"cb14aba17aff37115fac4cd476f3c98eba5fc4b7","unresolved":false,"context_lines":[{"line_number":128,"context_line":"    - cat2"},{"line_number":129,"context_line":"    - V-38495"},{"line_number":130,"context_line":""},{"line_number":131,"context_line":"- name: Get a list of audit logs in the auditd directory (for V-38498)"},{"line_number":132,"context_line":"  shell: ls /var/log/audit/"},{"line_number":133,"context_line":"  register: v38498_result"},{"line_number":134,"context_line":"  changed_when: false"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"7a2fa921_dc4b855e","line":131,"updated":"2015-10-11 19:50:21.000000000","message":"I didn\u0027t mean you should just remove the todo, I meant you should use the find module :P","commit_id":"2dba1f6b8cf8464b7e92e106a33203bfee947b56"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"ce2e8df40118d361bf407516582b5b336bfea5cf","unresolved":false,"context_lines":[{"line_number":128,"context_line":"    - cat2"},{"line_number":129,"context_line":"    - V-38495"},{"line_number":130,"context_line":""},{"line_number":131,"context_line":"- name: Get a list of audit logs in the auditd directory (for V-38498)"},{"line_number":132,"context_line":"  shell: ls /var/log/audit/"},{"line_number":133,"context_line":"  register: v38498_result"},{"line_number":134,"context_line":"  changed_when: false"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"7a2fa921_0bb9832e","line":131,"updated":"2015-10-13 01:17:28.000000000","message":"This may be the best I can do until Ansible 2.0 is released (with the find module). ;)","commit_id":"2dba1f6b8cf8464b7e92e106a33203bfee947b56"}]}