diff options
author | Jonathan Davila <jdavila@ansible.com> | 2016-01-25 17:35:39 -0500 |
---|---|---|
committer | Jonathan Davila <jdavila@ansible.com> | 2016-01-25 17:35:39 -0500 |
commit | f95652e7db0200209d7d402e0fb12268728b0729 (patch) | |
tree | 963a568a07caf9a5e63695ce6f585f1327dfa515 /docsite/rst/become.rst | |
parent | 1b76a9cef2d74eba9fd786e43f1cf3364a8ac501 (diff) | |
parent | ac1d1673be1968f21f158b8a1fda6249d0fb9b1e (diff) | |
download | ansible-f95652e7db0200209d7d402e0fb12268728b0729.tar.gz |
Merge remote-tracking branch 'upstream/devel' into ec2_util_boto3
Diffstat (limited to 'docsite/rst/become.rst')
-rw-r--r-- | docsite/rst/become.rst | 14 |
1 files changed, 7 insertions, 7 deletions
diff --git a/docsite/rst/become.rst b/docsite/rst/become.rst index 64628515c6..7597643f88 100644 --- a/docsite/rst/become.rst +++ b/docsite/rst/become.rst @@ -1,5 +1,5 @@ -Ansible Privilege Escalation -++++++++++++++++++++++++++++ +Become (Privilege Escalation) ++++++++++++++++++++++++++++++ Ansible can use existing privilege escalation systems to allow a user to execute tasks as another. @@ -7,17 +7,17 @@ Ansible can use existing privilege escalation systems to allow a user to execute Become `````` -Before 1.9 Ansible mostly allowed the use of sudo and a limited use of su to allow a login/remote user to become a different user -and execute tasks, create resources with the 2nd user's permissions. As of 1.9 'become' supersedes the old sudo/su, while still -being backwards compatible. This new system also makes it easier to add other privilege escalation tools like pbrun (Powerbroker), -pfexec and others. +Before 1.9 Ansible mostly allowed the use of `sudo` and a limited use of `su` to allow a login/remote user to become a different user +and execute tasks, create resources with the 2nd user's permissions. As of 1.9 `become` supersedes the old sudo/su, while still +being backwards compatible. This new system also makes it easier to add other privilege escalation tools like `pbrun` (Powerbroker), +`pfexec` and others. New directives -------------- become - equivalent to adding 'sudo:' or 'su:' to a play or task, set to 'true'/'yes' to activate privilege escalation + equivalent to adding `sudo:` or `su:` to a play or task, set to 'true'/'yes' to activate privilege escalation become_user equivalent to adding 'sudo_user:' or 'su_user:' to a play or task, set to user with desired privileges |