??????????????
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 173
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 174
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 175
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 176
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 177
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 178
ó
àUdac @` s› d d l m Z m Z m Z e Z i d d 6d g d 6d d 6Z d Z d Z d d
l m
Z
d Z d e f d „ ƒ YZ
d „ Z e d k r— e ƒ n d S( i ( t absolute_importt divisiont print_functions 1.1t metadata_versiont previewt statust communityt supported_bys
---
module: capabilities
short_description: Manage Linux capabilities
description:
- This module manipulates files privileges using the Linux capabilities(7) system.
version_added: "1.6"
options:
path:
description:
- Specifies the path to the file to be managed.
type: str
required: yes
aliases: [ key ]
capability:
description:
- Desired capability to set (with operator and flags, if state is C(present)) or remove (if state is C(absent))
type: str
required: yes
aliases: [ cap ]
state:
description:
- Whether the entry should be present or absent in the file's capabilities.
type: str
choices: [ absent, present ]
default: present
notes:
- The capabilities system will automatically transform operators and flags into the effective set,
so for example, C(cap_foo=ep) will probably become C(cap_foo+ep).
- This module does not attempt to determine the final operator and flags to compare,
so you will want to ensure that your capabilities argument matches the final capabilities.
author:
- Nate Coraor (@natefoo)
s
- name: Set cap_sys_chroot+ep on /foo
capabilities:
path: /foo
capability: cap_sys_chroot+ep
state: present
- name: Remove cap_net_bind_service from /bar
capabilities:
path: /bar
capability: cap_net_bind_service
state: absent
( t
AnsibleModulet =t -t +t CapabilitiesModulec B` sD e Z d Z d Z d „ Z d „ Z d „ Z d „ Z e d „ Z
RS( t Linuxc C` s | | _ | j d j ƒ | _ | j d j ƒ j ƒ | _ | j d | _ | j d d t ƒ| _ | j d d t ƒ| _
| j | j d | j d k ƒ| _ | j
ƒ d S( Nt patht
capabilityt statet getcapt requiredt setcapt op_requiredt present( t modulet paramst stripR t lowerR R t get_bin_patht Truet
getcap_cmdt
setcap_cmdt
_parse_capt capability_tupt run( t selfR ( ( sG /usr/lib/python2.7/site-packages/ansible/modules/system/capabilities.pyt __init__H s $c
` s™ ˆ j ˆ j ƒ } g | D] } | d ^ q } ˆ j d k rÝ ˆ j | k rÝ ˆ j j ru ˆ j j d t d d ƒ qyt t ‡ f d † | ƒ ƒ } | j
ˆ j ƒ ˆ j j d t d ˆ j d d d ˆ j ˆ j | ƒ ƒ nœ ˆ j d k ryˆ j d | k ryˆ j j r'ˆ j j d t d d ƒ qyt ‡ f d
† | ƒ } ˆ j j d t d ˆ j d d d ˆ j ˆ j | ƒ ƒ n ˆ j j d t d ˆ j ƒ d S( Ni R t changedt msgs capabilities changedc ` s | d ˆ j d k S( Ni ( R ( t x( R! ( sG /usr/lib/python2.7/site-packages/ansible/modules/system/capabilities.pyt ^ s R t stdoutt absentc ` s | d ˆ j d k S( Ni ( R ( R% ( R! ( sG /usr/lib/python2.7/site-packages/ansible/modules/system/capabilities.pyR& h s (
R R R R R t
check_modet exit_jsonR t listt filtert appendR t False( R! t currentt capt caps( ( R! sG /usr/lib/python2.7/site-packages/ansible/modules/system/capabilities.pyR S s :" :c
C` sc g } d | j | f } | j j | ƒ \ } } } | d k sg | j ƒ | k r“ | j d ƒ d k r“ | j j d d | d | j ƒ d | ƒ n | j ƒ | k r_| j d ƒ d j ƒ j ƒ } x˜ | D] } | j ƒ } d | k rB| j d ƒ } | j | d
ƒ \ | d
<}
} x= | D] } | j | |
| f ƒ q WqË | j | j | ƒ ƒ qË Wn | S( Ns %s -v %si s =i R$ s Unable to get capabilities of %sR' t stderrt ,iÿÿÿÿ(
R R t run_commandR t countt fail_jsont splitR R R- (
R! R t rvalt cmdt rcR' R2 R1 R0 t cap_groupt opt flagst subcap( ( sG /usr/lib/python2.7/site-packages/ansible/modules/system/capabilities.pyR l s 3,
c C` s– d j g | D] } d j | ƒ ^ q
ƒ } d | j | | f } | j j | ƒ \ } } } | d k rŽ | j j d d | d | d | ƒ n | Sd S( Nt t s
%s '%s' %si R$ s Unable to set capabilities of %sR' R2 ( t joinR R R4 R6 ( R! R R1 R0 R9 R: R' R2 ( ( sG /usr/lib/python2.7/site-packages/ansible/modules/system/capabilities.pyR ‡ s + &c C` s³ d } y: d } x- | d k r> | j t | ƒ } | d 7} q WWnD t k
r† | rv | j j d d t t ƒ ƒ q‡ | d d f Sn X| | } | j | ƒ \ } } | | | f S( Niÿÿÿÿi i R$ s# Couldn't find operator (one of: %s)( t findt OPSt ExceptionR R6 t strt NoneR7 ( R! R0 R t opindt iR< R= ( ( sG /usr/lib/python2.7/site-packages/ansible/modules/system/capabilities.pyR s
N( t __name__t
__module__t platformRF t distributionR" R R R R R ( ( ( sG /usr/lib/python2.7/site-packages/ansible/modules/system/capabilities.pyR D s c C` sƒ t d t d t d d d t d d g ƒ d t d d d t d d g ƒ d
t d d d d d
d d g ƒ ƒ d t ƒ } t | ƒ d S( Nt
argument_specR t typeRE R t aliasest keyR R0 R t defaultR t choicesR( t supports_check_mode( R t dictR R ( R ( ( sG /usr/lib/python2.7/site-packages/ansible/modules/system/capabilities.pyt main¤ s $ t __main__N( R R
R ( t
__future__R R R RN t
__metaclass__t ANSIBLE_METADATAt
DOCUMENTATIONt EXAMPLESt ansible.module_utils.basicR RC t objectR RU RI ( ( ( sG /usr/lib/python2.7/site-packages/ansible/modules/system/capabilities.pyt s
#`