From 66720460d01d153501961913c6856c15493c1902 Mon Sep 17 00:00:00 2001 From: Brian Coca Date: Mon, 20 Dec 2021 11:51:12 -0500 Subject: [PATCH] more exact wording of system_tmpdirs (#76587) --- lib/ansible/plugins/doc_fragments/shell_common.py | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/lib/ansible/plugins/doc_fragments/shell_common.py b/lib/ansible/plugins/doc_fragments/shell_common.py index 628cc2188d3..9ca9ece6db1 100644 --- a/lib/ansible/plugins/doc_fragments/shell_common.py +++ b/lib/ansible/plugins/doc_fragments/shell_common.py @@ -34,11 +34,13 @@ options: version_added: "2.10" system_tmpdirs: description: - - "List of valid system temporary directories on the managed machine for Ansible to choose - when it cannot use C(remote_tmp), normally due to permission issues. These must be world + - "List of valid system temporary directories on the managed machine for Ansible to validate + C(remote_tmp) against, when specific permissions are needed. These must be world readable, writable, and executable. This list should only contain directories which the system administrator has pre-created with the proper ownership and permissions otherwise security issues can arise." + - When C(remote_tmp) is required to be a system temp dir and it does not match any in the list, + the first one from the list will be used instead. default: [ /var/tmp, /tmp ] type: list env: [{name: ANSIBLE_SYSTEM_TMPDIRS}]