diff options
| author | Toshio Kuratomi <toshio@fedoraproject.org> | 2016-03-21 14:17:53 -0700 |
|---|---|---|
| committer | Toshio Kuratomi <toshio@fedoraproject.org> | 2016-03-23 09:27:09 -0700 |
| commit | 98f0917c0eabd67e2049c033ff8044ca6c7aa6f0 (patch) | |
| tree | 0924646b1742f4b35a66fc70c4ed2000c595c111 /lib/ansible/constants.py | |
| parent | c3548677de87d96fbd094461ea620d4506ecec4d (diff) | |
| download | ansible-module-permissions-fix.tar.gz | |
Don't create world-readable module and tempfiles without explicit user permissionmodule-permissions-fix
Diffstat (limited to 'lib/ansible/constants.py')
| -rw-r--r-- | lib/ansible/constants.py | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/ansible/constants.py b/lib/ansible/constants.py index 365bda04d0..ef3ffd4d02 100644 --- a/lib/ansible/constants.py +++ b/lib/ansible/constants.py @@ -165,6 +165,7 @@ DEFAULT_VAR_COMPRESSION_LEVEL = get_config(p, DEFAULTS, 'var_compression_level', # disclosure DEFAULT_NO_LOG = get_config(p, DEFAULTS, 'no_log', 'ANSIBLE_NO_LOG', False, boolean=True) DEFAULT_NO_TARGET_SYSLOG = get_config(p, DEFAULTS, 'no_target_syslog', 'ANSIBLE_NO_TARGET_SYSLOG', False, boolean=True) +ALLOW_WORLD_READABLE_TMPFILES = get_config(p, DEFAULTS, 'allow_world_readable_tmpfiles', None, False, boolean=True) # selinux DEFAULT_SELINUX_SPECIAL_FS = get_config(p, 'selinux', 'special_context_filesystems', None, 'fuse, nfs, vboxsf, ramfs', islist=True) |