geerlingguy / ansible-role-nodejs

Ansible Role - Node.js
https://galaxy.ansible.com/geerlingguy/nodejs/
MIT License
410 stars 252 forks source link

[security] Add security to limit the path change to the nodejs user #126

Closed jonathan-duval closed 3 years ago

jonathan-duval commented 3 years ago

The answer to the issue #125. To not change the actual way it work I created a new var and add a condition in the template.

The PR #102 only block overriding existing binary but it still allow the creation of new binaries who can be executed by root.

jonathan-duval commented 3 years ago

up

stale[bot] commented 3 years ago

This pull request has been marked 'stale' due to lack of recent activity. If there is no further activity, the PR will be closed in another 30 days. Thank you for your contribution!

Please read this blog post to see the reasons why I mark pull requests as stale.

geerlingguy commented 3 years ago

See #111