mirror of
https://github.com/ansible-collections/community.general.git
synced 2025-10-04 23:44:00 -07:00
fcd6d7010d
* Don't rely on username to check for root privileges The SSH username isn't a reliable way to check if we've got root privileges on the remote system (think "toor" on FreeBSD). Because of this check, Ansible previously tried to use the fallback solutions for granting file access (ACLs, world-readable files) even on systems where it had root privileges when the remote username didn't match the literal string "root". Instead of running checks on the username, just try using `chmod` in any case and fall back to the previous "non-root" solution when that fails. * Fail if we are root and changing ownership failed Since this code is security sensitive we document exactly the expected permissions of the temporary files once this function has run. That way if a flaw is found in one end-result we know more precisely what scenarios are affected and which are not. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| add_host.py | ||
| assemble.py | ||
| assert.py | ||
| async.py | ||
| copy.py | ||
| debug.py | ||
| eos_template.py | ||
| fail.py | ||
| fetch.py | ||
| group_by.py | ||
| include_vars.py | ||
| ios_template.py | ||
| iosxr_template.py | ||
| junos_template.py | ||
| net_template.py | ||
| normal.py | ||
| nxos_template.py | ||
| ops_template.py | ||
| package.py | ||
| patch.py | ||
| pause.py | ||
| raw.py | ||
| script.py | ||
| set_fact.py | ||
| synchronize.py | ||
| template.py | ||
| unarchive.py | ||
| win_copy.py | ||
| win_template.py | ||