)]}'
{"tasks/auditd.yml":[{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"19d243cb5247764b6f3319949d683dde1d317a9a","unresolved":false,"context_lines":[{"line_number":13,"context_line":"# See the License for the specific language governing permissions and"},{"line_number":14,"context_line":"# limitations under the License."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"- name: V-38631/38632 - The operating system must produce audit records (install auditd)"},{"line_number":17,"context_line":"  action: \"{{ansible_pkg_mgr }} name\u003d{{ auditd_pkg }} state\u003dpresent\""},{"line_number":18,"context_line":"  tags:"},{"line_number":19,"context_line":"    - auditd"},{"line_number":20,"context_line":"    - cat2"},{"line_number":21,"context_line":"    - V-38632"},{"line_number":22,"context_line":"    - V-38631"},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"- name: V-38631/38632 - The operating system must produce audit records (start auditd)"},{"line_number":25,"context_line":"  service:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"1a122d0e_faa3e640","line":22,"range":{"start_line":16,"start_character":0,"end_line":22,"end_character":13},"updated":"2016-04-28 20:40:47.000000000","message":"The action task is no longer supported in Ansible 2.x onwards as I recall, so you may wish to change this up to use the apt task on condition of the package managed being apt, then have another task for yum.","commit_id":"f19c2b4fbb42cb79692164a638bcef73560ec76c"}],"tasks/mail.yml":[{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"19d243cb5247764b6f3319949d683dde1d317a9a","unresolved":false,"context_lines":[{"line_number":14,"context_line":"# limitations under the License."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"- name: V-38669 - The postfix service must be enabled for mail delivery (install postfix)"},{"line_number":17,"context_line":"  action: \"{{ ansible_pkg_mgr }} name\u003dpostfix state\u003dpresent\""},{"line_number":18,"context_line":"  tags:"},{"line_number":19,"context_line":"    - mail"},{"line_number":20,"context_line":"    - cat3"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"1a122d0e_3a4f1e93","line":17,"range":{"start_line":17,"start_character":2,"end_line":17,"end_character":60},"updated":"2016-04-28 20:40:47.000000000","message":"See comment in \ttasks/auditd.yml","commit_id":"f19c2b4fbb42cb79692164a638bcef73560ec76c"}],"tasks/misc.yml":[{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"19d243cb5247764b6f3319949d683dde1d317a9a","unresolved":false,"context_lines":[{"line_number":14,"context_line":"# limitations under the License."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"- name: V-38489 - Install AIDE"},{"line_number":17,"context_line":"  action: \"{{ ansible_pkg_mgr }} name\u003daide state\u003dpresent\""},{"line_number":18,"context_line":"  tags:"},{"line_number":19,"context_line":"    - cat2"},{"line_number":20,"context_line":"    - V-38489"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"1a122d0e_fa512631","line":17,"range":{"start_line":17,"start_character":0,"end_line":17,"end_character":57},"updated":"2016-04-28 20:40:47.000000000","message":"See comment in tasks/auditd.yml","commit_id":"f19c2b4fbb42cb79692164a638bcef73560ec76c"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"19d243cb5247764b6f3319949d683dde1d317a9a","unresolved":false,"context_lines":[{"line_number":75,"context_line":"    - V-38619"},{"line_number":76,"context_line":""},{"line_number":77,"context_line":"- name: V-38620 - Synchronize system clock (installing chrony)"},{"line_number":78,"context_line":"  action: \"{{ ansible_pkg_mgr }} name\u003dchrony state\u003dpresent\""},{"line_number":79,"context_line":"  tags:"},{"line_number":80,"context_line":"    - cat2"},{"line_number":81,"context_line":"    - V-38620"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"1a122d0e_7a3cf6e0","line":78,"range":{"start_line":78,"start_character":2,"end_line":78,"end_character":59},"updated":"2016-04-28 20:40:47.000000000","message":"See comment in tasks/auditd.yml","commit_id":"f19c2b4fbb42cb79692164a638bcef73560ec76c"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"19d243cb5247764b6f3319949d683dde1d317a9a","unresolved":false,"context_lines":[{"line_number":114,"context_line":"# compressed with each run. We won\u0027t change the interval here, but we will"},{"line_number":115,"context_line":"# ensure that logrotate is installed (to meet the STIG requirement)."},{"line_number":116,"context_line":"- name: V-38624 - System logs must be rotated daily (install logrotate)"},{"line_number":117,"context_line":"  action: \"{{ ansible_pkg_mgr }} name\u003dlogrotate state\u003dpresent\""},{"line_number":118,"context_line":"  tags:"},{"line_number":119,"context_line":"    - cat3"},{"line_number":120,"context_line":"    - V-38624"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"1a122d0e_1a2ea2a4","line":117,"range":{"start_line":117,"start_character":2,"end_line":117,"end_character":62},"updated":"2016-04-28 20:40:47.000000000","message":"See comment in tasks/auditd.yml","commit_id":"f19c2b4fbb42cb79692164a638bcef73560ec76c"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"19d243cb5247764b6f3319949d683dde1d317a9a","unresolved":false,"context_lines":[{"line_number":160,"context_line":"    - V-38656"},{"line_number":161,"context_line":""},{"line_number":162,"context_line":"- name: Check if SNMP daemon is installed (for V-38660)"},{"line_number":163,"context_line":"  stat:"},{"line_number":164,"context_line":"    path: /etc/snmp/snmpd.conf"},{"line_number":165,"context_line":"  register: v38660_snmpd"},{"line_number":166,"context_line":"  changed_when: False"},{"line_number":167,"context_line":"  failed_when: False"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"1a122d0e_fa280699","line":164,"range":{"start_line":163,"start_character":0,"end_line":164,"end_character":30},"updated":"2016-04-28 20:40:47.000000000","message":"Is this really an effective way of checking this?","commit_id":"f19c2b4fbb42cb79692164a638bcef73560ec76c"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"19d243cb5247764b6f3319949d683dde1d317a9a","unresolved":false,"context_lines":[{"line_number":215,"context_line":"    - V-38684"},{"line_number":216,"context_line":""},{"line_number":217,"context_line":"- name: Check if vsftpd installed (for V-38599 and V-38702)"},{"line_number":218,"context_line":"  stat:"},{"line_number":219,"context_line":"    path: \"{{ vsftpd_conf_file }}\""},{"line_number":220,"context_line":"  register: v38599_vsftpd"},{"line_number":221,"context_line":"  changed_when: False"},{"line_number":222,"context_line":"  failed_when: False"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"1a122d0e_ba096e33","line":219,"range":{"start_line":218,"start_character":0,"end_line":219,"end_character":34},"updated":"2016-04-28 20:40:47.000000000","message":"Is this really an effective way of testing this?","commit_id":"f19c2b4fbb42cb79692164a638bcef73560ec76c"}],"tests/test.yml":[{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"940875942ecff33f1ef42d88e847f564656af56f","unresolved":false,"context_lines":[{"line_number":20,"context_line":"      apt:"},{"line_number":21,"context_line":"        update_cache: yes"},{"line_number":22,"context_line":"      when: ansible_pkg_mgr \u003d\u003d \u0027apt\u0027"},{"line_number":23,"context_line":"  # post_tasks:"},{"line_number":24,"context_line":"  #   - name: Stat 20auto-upgrades file"},{"line_number":25,"context_line":"  #     stat:"},{"line_number":26,"context_line":"  #       path: /etc/apt/apt.conf.d/20auto-upgrades"},{"line_number":27,"context_line":"  #     register: auto_upgrades_file"},{"line_number":28,"context_line":"  #   - name: Slurp contents of 50unattended-upgrades file"},{"line_number":29,"context_line":"  #     slurp:"},{"line_number":30,"context_line":"  #       src: /etc/apt/apt.conf.d/50unattended-upgrades"},{"line_number":31,"context_line":"  #     register: unattended_upgrades_file_encoded"},{"line_number":32,"context_line":"  #   - name: Decode slurp\u0027d 50-unattended-upgrades file"},{"line_number":33,"context_line":"  #     set_fact:"},{"line_number":34,"context_line":"  #       unattended_upgrades_file: \"{{ unattended_upgrades_file_encoded.content | b64decode }}\""},{"line_number":35,"context_line":"  #   - name: Ensure auto updates has been enabled"},{"line_number":36,"context_line":"  #     assert:"},{"line_number":37,"context_line":"  #       that:"},{"line_number":38,"context_line":"  #         - auto_upgrades_file.stat.exists"},{"line_number":39,"context_line":"  #   - name: Ensure that auto update notifications has been enabled"},{"line_number":40,"context_line":"  #     assert:"},{"line_number":41,"context_line":"  #       that:"},{"line_number":42,"context_line":"  #         - \"\u0027\\nUnattended-Upgrade::Mail \\\"root\\\";\\n\u0027 in unattended_upgrades_file\""},{"line_number":43,"context_line":"  roles:"},{"line_number":44,"context_line":"    - role: \"{{ rolename }}\""},{"line_number":45,"context_line":"  vars:"}],"source_content_type":"text/x-yaml","patch_set":22,"id":"1a122d0e_133a8834","line":42,"range":{"start_line":23,"start_character":0,"end_line":42,"end_character":84},"updated":"2016-05-04 11:02:06.000000000","message":"Either these need a refactor, or they should be removed.","commit_id":"2ab225a594f6b03cfc520fadae69b9d861ccdd74"}],"tox.ini":[{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"19d243cb5247764b6f3319949d683dde1d317a9a","unresolved":false,"context_lines":[{"line_number":112,"context_line":"    ansible-playbook -i {toxinidir}/tests/inventory \\"},{"line_number":113,"context_line":"                     -e \"rolename\u003d{toxinidir}\" \\"},{"line_number":114,"context_line":"                     {toxinidir}/tests/test.yml \\"},{"line_number":115,"context_line":"                     --skip-tag V-38462,V-51337"},{"line_number":116,"context_line":""},{"line_number":117,"context_line":""},{"line_number":118,"context_line":"[testenv:linters]"}],"source_content_type":"text/x-properties","patch_set":1,"id":"1a122d0e_956c45d1","side":"PARENT","line":115,"range":{"start_line":115,"start_character":21,"end_line":115,"end_character":47},"updated":"2016-04-28 20:40:47.000000000","message":"Do you really want to remove these?","commit_id":"dcb0ef9c6a79685628015367b7f937812cc2fb3c"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"19d243cb5247764b6f3319949d683dde1d317a9a","unresolved":false,"context_lines":[{"line_number":32,"context_line":"    # This is required as the default is \u0027/etc/ansible/roles\u0027 or a path"},{"line_number":33,"context_line":"    # specified in ansible.cfg"},{"line_number":34,"context_line":"    ANSIBLE_ROLES_PATH \u003d {homedir}/.ansible/roles:{toxinidir}/.."},{"line_number":35,"context_line":"    # Enable colorful output"},{"line_number":36,"context_line":"    ANSIBLE_FORCE_COLOR \u003d True"},{"line_number":37,"context_line":""},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"[testenv:docs]"}],"source_content_type":"text/x-properties","patch_set":1,"id":"1a122d0e_154af554","line":36,"range":{"start_line":35,"start_character":0,"end_line":36,"end_character":30},"updated":"2016-04-28 20:40:47.000000000","message":"This will have to come out for the gate checks because it causes funny characters in the console log as I recall. Maybe things have changed?","commit_id":"f19c2b4fbb42cb79692164a638bcef73560ec76c"}]}