Description of problem: In my RHOSP 16.1 lab I noticed that validate-selinux fails if ansible fails to find denied word in audit.log [1]. I noticed that appropriate play has "ignore_errors: true": https://github.com/openstack/validations-common/blob/master/validations_common/roles/validate_selinux/tasks/main.yml#L54 In this case ansible will still generate FAILED message, but will add "ignoring" line. It looks like validations framework fails to process such situation properly [1] "compute-0": { "_ansible_no_log": false, "action": "command", "changed": false, "cmd": "set -o pipefail\ngrep denied /var/log/audit/audit.log > /tmp/denials.log\n", "delta": "0:00:00.007134", "end": "2020-10-06 11:00:36.621651", "failed": true, "invocation": { "module_args": { "_raw_params": "set -o pipefail\ngrep denied /var/log/audit/audit.log > /tmp/denials.log\n", "_uses_shell": true, "argv": null, "chdir": null, "creates": null, "executable": null, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "warn": true } }, "msg": "non-zero return code", "rc": 1, "start": "2020-10-06 11:00:36.614517", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": [] },
Here is an example output that were generated by adjusted playbook: fatal: [localhost]: FAILED! => {"changed": true, "cmd": "set -o pipefail\ngrep denieds /var/log/audit/audit.log > /tmp/denials.log\n", "delta": "0:00:00.011958", "end": "2020-10-10 17:42:54.427789", "msg": "non-zero return code", "rc": 1, "start": "2020-10-10 17:42:54.415831", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": []} ...ignoring
*** Bug 1893893 has been marked as a duplicate of this bug. ***
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Red Hat OpenStack Platform 16.1.4 director bug fix advisory), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:0817