Description of problem:

Following our documentation to Install fapolicyd on Capsule, it is blocking to perform Ansible Roles on Capsule.

How reproducible:

Is this issue a regression from an earlier version:

Steps to Reproduce:

1. For a new installation, install fapolicyd: # dnf install fapolicyd

2. For an existing installation, install fapolicyd using satellite-maintain packages install: # satellite-maintain packages install fapolicyd

3. Start the fapolicyd service: # systemctl enable --now fapolicyd

4. Set the remote execution ssh user as non-root (rexuser)

5. Configure non-root user 'rexuser' on Capsule to receive the ssh via Satellite and perform sudo

6. Associate a Ansible Role to Capsule (example: RedHatInsights.insights-client)

7. Run Ansible roles on Capsule

Actual behavior:
Getting the error: Operation not permitted

Expected behavior:
Be able to perform the Ansible Roles without issues

Business Impact / Additional info:

Medium