Details
-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
Normal
-
sst_idm_ipa
-
ssg_idm
-
False
-
-
Unspecified
Description
What were you trying to do that didn't work?
Create and configure host groups, hbac rules, and sudo rules.
Please provide the package NVR for which bug is seen:
How reproducible:
All the time
Steps to reproduce
- Run https://gitlab.cee.redhat.com/mralph/rhone on a system running fapolicyd
Expected results
Playbook completes successfully like it does when fapolicyd isn't running.
Actual results
Fails with the following fapolicyd debug denys:
perm=open auid=1000 pid=52687 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744481.072006-20113-213481969138473/AnsiballZ_setup.py ftype=text/x-python trust=0
perm=open auid=1000 pid=52687 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744481.072006-20113-213481969138473/AnsiballZ_setup.py ftype=text/x-python trust=0
perm=open auid=1000 pid=52841 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744483.386105-20133-173796136010476/AnsiballZ_ipahostgroup.py ftype=text/x-python trust=0
perm=open auid=1000 pid=52841 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744483.386105-20133-173796136010476/AnsiballZ_ipahostgroup.py ftype=text/x-python trust=0
perm=open auid=1000 pid=52955 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744487.6325023-20142-171031175678658/AnsiballZ_setup.py ftype=text/x-python trust=0
perm=open auid=1000 pid=52955 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744487.6325023-20142-171031175678658/AnsiballZ_setup.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53110 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744489.31752-20151-263596905800409/AnsiballZ_ipahbacsvc.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53110 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744489.31752-20151-263596905800409/AnsiballZ_ipahbacsvc.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53222 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744491.8497138-20159-155452008215010/AnsiballZ_ipahbacsvcgroup.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53222 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744491.8497138-20159-155452008215010/AnsiballZ_ipahbacsvcgroup.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53334 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744494.4644642-20167-184117501990508/AnsiballZ_ipahbacrule.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53334 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744494.4644642-20167-184117501990508/AnsiballZ_ipahbacrule.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53450 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744498.467987-20175-159504314657403/AnsiballZ_ipahbacrule.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53450 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744498.467987-20175-159504314657403/AnsiballZ_ipahbacrule.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53562 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744501.0873296-20183-59614561500771/AnsiballZ_ipahbacrule.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53562 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744501.0873296-20183-59614561500771/AnsiballZ_ipahbacrule.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53673 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744510.8678215-20223-229576411798116/AnsiballZ_setup.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53673 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744510.8678215-20223-229576411798116/AnsiballZ_setup.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53827 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744512.6495857-20231-78144474762512/AnsiballZ_ipasudocmd.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53827 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744512.6495857-20231-78144474762512/AnsiballZ_ipasudocmd.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53938 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744515.3975194-20239-178009638676003/AnsiballZ_ipasudocmd.py ftype=text/x-python trust=0
perm=open auid=1000 pid=53938 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744515.3975194-20239-178009638676003/AnsiballZ_ipasudocmd.py ftype=text/x-python trust=0
perm=open auid=1000 pid=54049 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744517.5499787-20247-100301027343042/AnsiballZ_ipasudocmd.py ftype=text/x-python trust=0
perm=open auid=1000 pid=54049 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744517.5499787-20247-100301027343042/AnsiballZ_ipasudocmd.py ftype=text/x-python trust=0
perm=open auid=1000 pid=54160 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744519.7139833-20255-173438402303228/AnsiballZ_ipasudocmdgroup.py ftype=text/x-python trust=0
perm=open auid=1000 pid=54160 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744519.7139833-20255-173438402303228/AnsiballZ_ipasudocmdgroup.py ftype=text/x-python trust=0
perm=open auid=1000 pid=54272 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744522.085666-20263-87689466904526/AnsiballZ_ipasudorule.py ftype=text/x-python trust=0
perm=open auid=1000 pid=54272 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744522.085666-20263-87689466904526/AnsiballZ_ipasudorule.py ftype=text/x-python trust=0
perm=open auid=1000 pid=54387 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744526.0156453-20272-139188711774379/AnsiballZ_ipasudorule.py ftype=text/x-python trust=0
perm=open auid=1000 pid=54387 exe=/usr/bin/python3.9 : path=/home/miker/.ansible/tmp/ansible-tmp-1709744526.0156453-20272-139188711774379/AnsiballZ_ipasudorule.py ftype=text/x-python trust=0