From 4a030c3725637d0f6a6a2e926eaacbfd601c0a92 Mon Sep 17 00:00:00 2001 From: Chris Church Date: Tue, 11 Nov 2014 18:52:54 -0500 Subject: [PATCH] Hide all of /var/log/ from jobs running using proot. --- awx/main/tasks.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/awx/main/tasks.py b/awx/main/tasks.py index 81d0bb143c..4cb8c41da2 100644 --- a/awx/main/tasks.py +++ b/awx/main/tasks.py @@ -343,9 +343,9 @@ class BaseTask(Task): - /tmp (except for own tmp files) ''' new_args = [getattr(settings, 'AWX_PROOT_CMD', 'proot'), '-r', '/'] - hide_paths = ['/etc/tower', '/var/lib/awx', '/var/log/tower', - '/var/log/supervisor', tempfile.gettempdir(), - settings.PROJECTS_ROOT, settings.JOBOUTPUT_ROOT] + hide_paths = ['/etc/tower', '/var/lib/awx', '/var/log', + tempfile.gettempdir(), settings.PROJECTS_ROOT, + settings.JOBOUTPUT_ROOT] hide_paths.extend(getattr(settings, 'AWX_PROOT_HIDE_PATHS', None) or []) for path in sorted(set(hide_paths)): if not os.path.exists(path):