I was curious because ansible is actually executing the commands through
python, so I wanted to be sure that no selinux rule was preventing that on
your system.
Could you also please share the playbook you're running (only the failing
step is required) as well as the output run with -vvvv?
Thanks!
On Tue, Apr 8, 2014 at 9:33 AM, Makimoto Marakatti <makim...@gmail.com>wrote:
> [root@clientbox tmp]# sestatus
> SELinux status: disabled
>
> Same result in both client and master.
> So I have been doing tests and I cannot read any file which is set 0440
> owned by root, through ansible.
>
> [root@clientbox tmp]# stat /etc/sudoers
> File: `/etc/sudoers'
> Size: 10092 Blocks: 24 IO Block: 4096 regular file
> Device: fd00h/64768d Inode: 1246098 Links: 1
> Access: (0440/-r--r-----) Uid: ( 0/ root) Gid: ( 0/ root)
> Access: 2014-04-08 13:55:52.000000000 +0100
> Modify: 2014-04-08 12:59:46.000000000 +0100
> Change: 2014-04-08 12:59:46.000000000 +0100
>
>
> But I can do whatever I want through ssh, sudo and a pseudo tty.
> As it should be...
>
> And of course this is a issue *I* have. I still remember the cake of JP
> Mens.
> But still ansible does not play ball and straight ssh does.
>
> Any help appreciated.
>
>
> On Tuesday, 8 April 2014 15:21:01 UTC+1, James Cammarata wrote:
>
>> Do you have selinux enforcing?
>>
>>
>> On Tue, Apr 8, 2014 at 5:13 AM, Makimoto Marakatti <maki...@gmail.com>wrote:
>>
>>> Hi all
>>>
>>> I'm having a weird issue that I can't figure out:
>>>
>>> I'm making a backup of /etc/sudoers from client boxes, before templating.
>>> ansible complains it has no rights to read /etc/sudoers. (with sudo)
>>> And yet it can read any other file in /etc/.
>>> /etc/sudoers has 0440 as permissions.
>>>
>>> I've tried with fetch, shell, command, and lastly script.
>>> All fail with some variation of this:
>>>
>>> failed: [clientbox] => {"changed": true, "rc": 1}
>>> stdout: cp: cannot open `/etc/sudoers' for reading: Permission denied
>>>
>>> And I know this is not a permissions issue as this actually works in the
>>> same box:
>>>
>>> ssh -t clientbox "sudo -Hi cp /etc/sudoers /tmp/temp_sudoers && sudo
>>> -Hi chmod 777 /tmp/temp_sudoers && scp /tmp/temp_sudoers
>>> ansible_masterbox:/tmp/"
>>>
>>> Could anyone please let me know what I'm doing wrong here?
>>>
>>> Thanks
>>>
>>> --
>>> You received this message because you are subscribed to the Google
>>> Groups "Ansible Project" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to ansible-proje...@googlegroups.com.
>>> To post to this group, send email to ansible...@googlegroups.com.
>>>
>>> To view this discussion on the web visit https://groups.google.com/d/
>>> msgid/ansible-project/eee2d34a-a2e5-408d-8ccc-
>>> e67c11d5a7ee%40googlegroups.com<https://groups.google.com/d/msgid/ansible-project/eee2d34a-a2e5-408d-8ccc-e67c11d5a7ee%40googlegroups.com?utm_medium=email&utm_source=footer>
>>> .
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>
>>
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/CAFg%2Bn8TbOxKPoueB3gpk-bBd0dyDk88yVdwwTTby77QVFrszKg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
