openstack-ansible-security fails on the audit package verification when run a second time

[Nikhil Gupta]

On the newton/stable branch the openstack-ansible-security role fails on the task `Check audit package contents for alterations with rpm (for V-38637)` when the role is run a second time for centos or rhel operating systems.

The shell command "rpmverify audit audit-libs | grep -v -E '\\.conf$'| wc -l" fails to take into account that the /var/log/audit directory would change as it would have new audit logs under it during the run after the first run.

This is not an issue on the master.

[Enzo (enzowang-nz)]

I met the same issue. /var/log/audit triggers the failure.

[Logan V (loganv)]

https://review.openstack.org/#/c/409913/ aims to fix this I think.

[Logan V (loganv)]

Also, the above patch has merged into Newton, so this should be fixed in the stable/newton branch currently.

[Jean-Philippe Evrard (jean-philippe-evrard)]

I'll mark this as Fix Released, and we'll wait for the OP feedback/re-opening.

[Nikhil Gupta (lihkin)]

Thanks for the fix. Looks good.