OSSForks/ansible
1
0
Fork 0
mirror of https://github.com/zebrajr/ansible.git synced 2025-12-06 12:19:53 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

functional backport of 74448 (#74567)

Browse Source 
Co-authored-by: Alicia Cozine <acozine@users.noreply.github.com>
This commit is contained in:
Alicia Cozine 2021-05-04 17:56:35 -05:00 committed by GitHub
parent 167726e291
commit 4da2e2db79
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
examples/ansible.cfg
View File

@ -278,7 +278,7 @@
# choice but to create world readable temporary files to execute a module on
# the remote machine. This option is False by default for security. Users may
# turn this on to have behaviour more like Ansible prior to 2.1.x. See
# https://docs.ansible.com/ansible/latest/user_guide/become.html#becoming-an-unprivileged-user
# https://docs.ansible.com/ansible/latest/user_guide/become.html#risks-of-becoming-an-unprivileged-user
# for more secure ways to fix this than enabling this option.
#
#allow_world_readable_tmpfiles = False

4
lib/ansible/plugins/action/__init__.py
View File

@ -660,7 +660,7 @@ class ActionBase(with_metaclass(ABCMeta, object)):
'allow_world_readable_tmpfiles is a no-op. See this '
'URL for more details: '
'https://docs.ansible.com/ansible/become.html'
'#becoming-an-unprivileged-user')
'#risks-of-becoming-an-unprivileged-user')
if execute:
group_mode = 'g+rwx'
else:
@ -695,7 +695,7 @@ class ActionBase(with_metaclass(ABCMeta, object)):
'to create when becoming an unprivileged user '
'(rc: %s, err: %s}). For information on working around this, see '
'https://docs.ansible.com/ansible/become.html'
'#becoming-an-unprivileged-user' % (
'#risks-of-becoming-an-unprivileged-user' % (
res['rc'],
to_native(res['stderr'])))