GET /api/v1/files/893
HTTP 200 OK
Allow: GET, PUT, PATCH, DELETE, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "id": 893,
    "sha1": "6ad16985d05e8213c5fa45542b333911eccd77e7",
    "playbook": {
        "id": 15,
        "items": {
            "plays": 4,
            "tasks": 279,
            "results": 219,
            "hosts": 1,
            "files": 110,
            "records": 0
        },
        "labels": [],
        "started": "2020-01-31T15:49:56.286406Z",
        "ended": "2020-01-31T15:58:51.284585Z",
        "duration": "00:08:54.998179",
        "name": null,
        "ansible_version": "2.8.8",
        "status": "failed",
        "path": "/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-hosts.yml"
    },
    "content": "---\n# Copyright 2016, Rackspace US, Inc.\n#\n# Licensed under the Apache License, Version 2.0 (the \"License\");\n# you may not use this file except in compliance with the License.\n# You may obtain a copy of the License at\n#\n#     http://www.apache.org/licenses/LICENSE-2.0\n#\n# Unless required by applicable law or agreed to in writing, software\n# distributed under the License is distributed on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n# See the License for the specific language governing permissions and\n# limitations under the License.\n\n- name: Check if gdm is installed and configured\n  stat:\n    path: /etc/gdm/custom.conf\n  register: gdm_conf_check\n  check_mode: no\n\n- name: V-71953 - The operating system must not allow an unattended or automatic logon to the system via a graphical user interface\n  lineinfile:\n    dest: /etc/gdm/custom.conf\n    line: \"^AutomaticLoginEnable=true\"\n    state: absent\n  when:\n    - gdm_conf_check.stat.exists\n    - security_disable_gdm_automatic_login | bool\n  tags:\n    - graphical\n    - high\n    - V-71953\n\n- name: V-71955 - The operating system must not allow guest logon to the system.\n  lineinfile:\n    dest: /etc/gdm/custom.conf\n    line: \"^TimedLoginEnable=true\"\n    state: absent\n  when:\n    - gdm_conf_check.stat.exists\n    - security_disable_gdm_timed_login | bool\n  tags:\n    - graphical\n    - high\n    - V-71955\n\n- name: Check for dconf profiles\n  stat:\n    path: /etc/dconf/profile\n  register: dconf_check\n  tags:\n    - always\n\n- name: Create a user profile in dconf\n  copy:\n    src: dconf-user-profile\n    dest: /etc/dconf/profile/user\n  when:\n    - dconf_check.stat.exists\n  tags:\n    - graphical\n    - medium\n    - V-71891\n    - V-71893\n    - V-71901\n\n- name: Create dconf directories\n  file:\n    path: \"{{ item }}\"\n    state: directory\n  with_items:\n    - /etc/dconf/db/local.d/\n    - /etc/dconf/db/local.d/locks\n    - /etc/dconf/db/gdm.d/\n  when:\n    - dconf_check.stat.exists\n  tags:\n    - graphical\n    - medium\n    - V-71859\n    - V-71891\n    - V-71893\n    - V-71901\n\n- name: Configure graphical session locking\n  template:\n    src: dconf-screensaver-lock.j2\n    dest: /etc/dconf/db/local.d/00-screensaver\n  when:\n    - dconf_check.stat.exists\n  notify:\n    - dconf update\n  tags:\n    - graphical\n    - medium\n    - V-71891\n    - V-71893\n    - V-71901\n\n- name: Prevent users from changing graphical session locking configurations\n  template:\n    src: dconf-session-user-config-lockout.j2\n    dest: /etc/dconf/db/local.d/locks/session\n  when:\n    - dconf_check.stat.exists\n  notify:\n    - dconf update\n  tags:\n    - graphical\n    - medium\n    - V-71891\n    - V-71893\n    - V-71901\n\n- name: Create a GDM profile for displaying a login banner\n  copy:\n    src: dconf-profile-gdm\n    dest: /etc/dconf/profile/gdm\n  when:\n    - dconf_check.stat.exists\n  notify:\n    - dconf update\n  tags:\n    - graphical\n    - medium\n    - V-71859\n\n- name: Create a GDM keyfile for machine-wide settings\n  template:\n    src: dconf-gdm-banner-message.j2\n    dest: \"{{ item }}\"\n  with_items:\n    - /etc/dconf/db/gdm.d/01-banner-message\n    - /etc/dconf/db/local.d/01-banner-message\n  when:\n    - dconf_check.stat.exists\n  notify:\n    - dconf update\n  tags:\n    - graphical\n    - medium\n    - V-71859\n",
    "created": "2020-01-31T15:49:56.823936Z",
    "updated": "2020-01-31T15:49:56.823971Z",
    "path": "/home/zuul/src/opendev.org/openstack/ansible-hardening/tasks/rhel7stig/graphical.yml"
}