# What happened to community.general.fapolicyd

**URL:** <https://forum.ansible.com/t/what-happened-to-community-general-fapolicyd/44219>\
**Category:** Get Help\
**Created:** [August 7, 2025, 4:38am UTC](https://forum.ansible.com/t/what-happened-to-community-general-fapolicyd/44219 "2025-08-07T04:38:29Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![nlaphine](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/nlaphine/32/9231_2.png) [@nlaphine](https://forum.ansible.com/u/nlaphine)\
**Post date:** [August 7, 2025, 4:38am UTC](https://forum.ansible.com/t/what-happened-to-community-general-fapolicyd/44219/1 "2025-08-07T04:38:29Z")

</div>

I just got permission to use coplilot in my IDE.

To test it I asked it how to update fapolicyd trusts.

It came back with this:

```auto
- name: Template Copy | Update fapolicyd trusts for {{ item }}
  community.general.fapolicyd:
    path: "/usr/local/bin/{{ item }}"
    trust_file: "{{ ansible_role_name }}"
    state: present
  when:
    - template_copy.changed
    - '"fapolicyd" in ansible_facts.packages'
  notify: Restart fapolicyd

```

Wonderful, it can replace my two stanzas:

```auto
- name: Template Copy | Remove old trust file entry
  ansible.builtin.lineinfile:
    path: "/etc/fapolicyd/trust.d/{{ ansible_role_name }}"
    state: absent
    regexp: "^/usr/local/bin/{{ item }}"
  when:
  - template_copy.changed
  - '"fapolicyd" in ansible_facts.packages'

- name: Template Copy | Update fapolicyd trusts for {{ item }}
  ansible.builtin.command: /usr/sbin/fapolicyd-cli --file add "/usr/local/bin/{{ item }}" --trust-file "{{ ansible_role_name }}"
  when:
  - template_copy.changed
  - '"fapolicyd" in ansible_facts.packages'
  notify: Restart fapolicyd # handlers are from fapolicyd role

```

Except it can’t.

The linux-system-roles aren’t swiss army knives (one task and do it well). They are hammers.  
I mention this in case the general.fapolicyd was abandoned because of those roles.

The example code; sets up fapolicyd and adds some files to a trust (unnamed).

```auto
- name: Example fapolicyd role invocation
  hosts: all
  vars:
    fapolicyd_setup_enable_service: true
    fapolicyd_setup_integrity: sha256
    fapolicyd_setup_trust: rpmdb,file
    fapolicyd_add_trusted_file:
      - /etc/passwd
      - /etc/fapolicyd/fapolicyd.conf
      - /etc/krb5.conf
  roles:
    - fapolicyd

```

I don’t need fapolicyd to be setup, it’s already done.

If it went away, the code should be somewhere.

thanks

Peter

---

<div class="post-metadata">

**Author:** ![felixfontein](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/felixfontein/32/7530_2.png) [@felixfontein](https://forum.ansible.com/u/felixfontein)\
**Post date:** [August 7, 2025, 4:40am UTC](https://forum.ansible.com/t/what-happened-to-community-general-fapolicyd/44219/2 "2025-08-07T04:40:05Z")

</div>

community.general.fapolicyd never existed. Copilot invented it. It’s called [hallucination](https://en.wikipedia.org/wiki/AI_hallucination).

---

<div class="post-metadata">

**Author:** ![nlaphine](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/nlaphine/32/9231_2.png) [@nlaphine](https://forum.ansible.com/u/nlaphine)\
**Post date:** [August 7, 2025, 5:04am UTC](https://forum.ansible.com/t/what-happened-to-community-general-fapolicyd/44219/3 "2025-08-07T05:04:02Z")

</div>

sweet. thanks.

Pity.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\
**Post date:** [September 6, 2025, 5:04am UTC](https://forum.ansible.com/t/what-happened-to-community-general-fapolicyd/44219/4 "2025-09-06T05:04:03Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.