Security role should look for unlabeled devices

[Major Hayden]

V-51379 requires that no unlabeled devices exist on the system. This doesn't apply for AppArmor, so it was skipped in Ubuntu. However, these devices ought to be checked in CentOS.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/319448

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/319448
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-security/commit/?id=bf28fdfe90fe5a16c57f5c4c18cff9510bed2423
Submitter: Jenkins
Branch: master

commit bf28fdfe90fe5a16c57f5c4c18cff9510bed2423
Author: Major Hayden <email address hidden>
Date: Wed Jun 1 13:22:12 2016 -0500

    Search for unlabeled device files

    The checks for V-51379 didn't apply for Ubuntu and they were
    unintentionally skipped in CentOS after the multi-distro work
    was completed.

    This patch adds a search for unlabeled device files on CentOS 7 systems
    and halts the playbook if an unlabeled device is found. This is a very
    rare occurrence.

    Documentation updates and release notes are provided.

    Closes-bug: 1584196

    Change-Id: Iba4be3bc5fa607685e3b4eeefda35f93894c7f28

[Thierry Carrez (ttx)]

This issue was fixed in the openstack/openstack-ansible-security 14.0.0.0b1 development milestone.