So that's a security bug then. The point of sudo is to enable fine-grained control rather than just granting root access to everything.
Ansible needs to be upgraded to only SUDO the expected commands rather than an entire script that does other things that are not visible. This is the same as https://github.com/ansible/ansible/issues/13077 So I guess you get this question a lot. On Monday, November 9, 2015 at 11:00:52 PM UTC, Brian Coca wrote: > > no, the issue is that ansible does not support fine grained sudo > permissions, it executes a python file which might execute the > commands you see, but the sudo wraps the entire thing, not just the > command. > > > > -- > Brian Coca > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/c7067524-43ce-4c2e-9ac6-6436c786668d%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
