Hi Darren,

Hmm.... so yeah if http://docs.ansible.com/intro_configuration.html#sudo-exe
does not help, it seems we need to have another setting that if set adds
the "-c", so it can be removed.

Maybe this would work if it were tunable?

I believe this would be easy to implement.

Something like "base_sudo_flags=-c" # etc

and you could remove it...

--Michael


On Wed, Sep 3, 2014 at 12:32 PM, Darren Johnson <[email protected]>
wrote:

> I am trying to meet a corporate requirement wherein ansible's actions are
> recorded by sudosh on each server it touches.  I tried changing
> "executable" from /bin/sh to /usr/bin/sudosh, but sudosh doesn't have the
> corresponding -c parameter (it has one, but with different meaning).  I
> tried making ansible's login shell be /usr/bin/sudosh.  That works for
> non-sudo operations--I can* ls /tmp* and that works.  However, if I try
> to sudo from the sudosh shell, I get the following error:
>
> ...isn't allowed to be executed with process or redirect controls.
>
> I don't see a lot of information on this particular error in the context
> of sudo/sh.
>
> Is it even feasible/possible to do what I'm trying to do?
>
> Thanks...
>
> Darren
>
>  --
> You received this message because you are subscribed to the Google Groups
> "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To post to this group, send email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/8c7ebddc-c541-4718-ab7b-36fd9c0ec2b5%40googlegroups.com
> <https://groups.google.com/d/msgid/ansible-project/8c7ebddc-c541-4718-ab7b-36fd9c0ec2b5%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CA%2BnsWgy%3Da7G9xMW96f%2BKhYSVG6toGvUu%3DhMxXTf%3DM-LmFEvdsw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to