zuul/zuul/ansible
Tobias Henkel 5763b8e4d7
Add missing localhost delegation checks to some modules
Currently we don't check some modules for delegation to
localhost. This would make it possible to overwrite any data which is
writable within the bwrap context. Further the script module allows
arbitrary code execution when delegated to localhost.

The following modules are affected:
* assemble: add safe path check
* copy: add safe path check
* patch: add safe path check
* script: block completely
* template: add safe path check
* unarchive: add tests, fixed by safe path check of copy

Change-Id: I2360219f50e6a28bb134468ead08ec72148ad192
Story: 2001681
2018-03-22 20:42:01 +01:00
..
action Add missing localhost delegation checks to some modules 2018-03-22 20:42:01 +01:00
callback Fix no_log bug with result lists 2018-03-15 09:45:55 -07:00
filter Be explicit about legacy var additions/omissions 2017-10-17 18:28:43 +00:00
library Fix broken fail_json in zuul_console 2018-02-12 09:02:46 +01:00
lookup Add some ansible plugin tests 2017-08-03 22:21:19 -05:00
__init__.py Ansible launcher: add zuul_runner module 2016-05-12 11:37:19 -07:00
logconfig.py Use deepcopy when copying ansible logging config 2017-09-06 18:03:12 -07:00
paths.py Add missing localhost delegation checks to some modules 2018-03-22 20:42:01 +01:00