The way ansible works is by running arbitrary scripts (modules) on the
remote machine, as such it is very hard to make sudo rules to allow this
that are virtually equivalent to ALL.

​Some modules do execute system commands, many others use syscalls
directly, so even if we introduce a way to 'delegate' the privilege
escalation to the module, it won't help you in many cases.​


----------
Brian Coca

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CACVha7ft6MKuiy9zGv3ENDHUwV7HXY8yuS-ycEjV2EYCtiS54Q%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to