Not an explicit feature, but I can think of a few ways you could do this: - Have an assert/fail at the start of the playbook that checks ``playbook_dir`` is in the 'allowed paths'. - Setup selinux/apparmor policies to restrict what files ansible-playbook can access. - Add to the check to a custom plugin you always load (callback/connection/?). - Use a wrapper script or shell alias function that does the check and then calls the 'real' Ansible CLI.
---------- Brian Coca -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CACVha7cONrhZrpzOd41EDYZ3NVDsie5zM41knouOy75mZD2UsA%40mail.gmail.com.
