External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-05-06 17:07:36 -02:30
Code Issues Packages Projects Releases Wiki Activity

Hide all of /var/log/ from jobs running using proot.

Browse Source
This commit is contained in:
Chris Church
2014-11-11 18:52:54 -05:00
parent a9c6dadc1a
commit 4a030c3725
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
awx/main/tasks.py
View File

@@ -343,9 +343,9 @@ class BaseTask(Task):
- /tmp (except for own tmp files) - /tmp (except for own tmp files)
''' '''
new_args = [getattr(settings, 'AWX_PROOT_CMD', 'proot'), '-r', '/'] new_args = [getattr(settings, 'AWX_PROOT_CMD', 'proot'), '-r', '/']
hide_paths = ['/etc/tower', '/var/lib/awx', '/var/log/tower', hide_paths = ['/etc/tower', '/var/lib/awx', '/var/log',
'/var/log/supervisor', tempfile.gettempdir(), tempfile.gettempdir(), settings.PROJECTS_ROOT,
settings.PROJECTS_ROOT, settings.JOBOUTPUT_ROOT] settings.JOBOUTPUT_ROOT]
hide_paths.extend(getattr(settings, 'AWX_PROOT_HIDE_PATHS', None) or []) hide_paths.extend(getattr(settings, 'AWX_PROOT_HIDE_PATHS', None) or [])
for path in sorted(set(hide_paths)): for path in sorted(set(hide_paths)):
if not os.path.exists(path): if not os.path.exists(path):