So that's a security bug then.

The point of sudo is to enable fine-grained control rather than just 
granting root access to everything.

Ansible needs to be upgraded to only SUDO the expected commands rather than 
an entire script that does other things that are not visible.

This is the same as https://github.com/ansible/ansible/issues/13077 

So I guess you get this question a lot.


On Monday, November 9, 2015 at 11:00:52 PM UTC, Brian Coca wrote:
>
> no, the issue is that ansible does not support fine grained sudo 
> permissions, it executes a python file which might execute the 
> commands you see, but the sudo wraps the entire thing, not just the 
> command. 
>
>
>
> -- 
> Brian Coca 
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/c7067524-43ce-4c2e-9ac6-6436c786668d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to