�
�Udac @` s� d d l m Z m Z m Z e Z i d d 6d g d 6d d 6Z d Z d Z d
Z d d l
Z
d d l m Z m
Z
d d
l m Z d � Z d e d � Z d d � Z d � Z e d � Z d � Z e d k r� e � n d S( i ( t absolute_importt divisiont print_functions 1.1t metadata_versiont stableinterfacet statust coret supported_bys
---
module: acl
version_added: '1.4'
short_description: Set and retrieve file ACL information.
description:
- Set and retrieve file ACL information.
options:
path:
description:
- The full path of the file or object.
type: path
required: yes
aliases: [ name ]
state:
description:
- Define whether the ACL should be present or not.
- The C(query) state gets the current ACL without changing it, for use in C(register) operations.
choices: [ absent, present, query ]
default: query
follow:
description:
- Whether to follow symlinks on the path if a symlink is encountered.
type: bool
default: yes
default:
description:
- If the target is a directory, setting this to C(yes) will make it the default ACL for entities created inside the directory.
- Setting C(default) to C(yes) causes an error if the path is a file.
type: bool
default: no
version_added: '1.5'
entity:
description:
- The actual user or group that the ACL applies to when matching entity types user or group are selected.
version_added: '1.5'
etype:
description:
- The entity type of the ACL to apply, see C(setfacl) documentation for more info.
choices: [ group, mask, other, user ]
version_added: '1.5'
permissions:
description:
- The permissions to apply/remove can be any combination of C(r), C(w) and C(x) (read, write and execute respectively)
version_added: '1.5'
entry:
description:
- DEPRECATED.
- The ACL to set or remove.
- This must always be quoted in the form of C(<etype>:<qualifier>:<perms>).
- The qualifier may be empty for some types, but the type and perms are always required.
- C(-) can be used as placeholder when you do not care about permissions.
- This is now superseded by entity, type and permissions fields.
recursive:
description:
- Recursively sets the specified ACL.
- Incompatible with C(state=query).
type: bool
default: no
version_added: '2.0'
use_nfsv4_acls:
description:
- Use NFSv4 ACLs instead of POSIX ACLs.
type: bool
default: no
version_added: '2.2'
recalculate_mask:
description:
- Select if and when to recalculate the effective right masks of the files.
- See C(setfacl) documentation for more info.
- Incompatible with C(state=query).
choices: [ default, mask, no_mask ]
default: default
version_added: '2.7'
author:
- Brian Coca (@bcoca)
- Jérémie Astori (@astorije)
notes:
- The C(acl) module requires that ACLs are enabled on the target filesystem and that the C(setfacl) and C(getfacl) binaries are installed.
- As of Ansible 2.0, this module only supports Linux distributions.
- As of Ansible 2.3, the I(name) option has been changed to I(path) as default, but I(name) still works as well.
s�
- name: Grant user Joe read access to a file
acl:
path: /etc/foo.conf
entity: joe
etype: user
permissions: r
state: present
- name: Removes the ACL for Joe on a specific file
acl:
path: /etc/foo.conf
entity: joe
etype: user
state: absent
- name: Sets default ACL for joe on /etc/foo.d/
acl:
path: /etc/foo.d/
entity: joe
etype: user
permissions: rw
default: yes
state: present
- name: Same as previous but using entry shorthand
acl:
path: /etc/foo.d/
entry: default:user:joe:rw-
state: present
- name: Obtain the ACL for a specific file
acl:
path: /etc/foo.conf
register: acl_info
s�
acl:
description: Current ACL on provided path (after changes, if any)
returned: success
type: list
sample: [ "user::rwx", "group::rwx", "other::rwx" ]
N( t
AnsibleModulet get_platform( t to_nativec C` s� | j d � } d
} | j � j d � r@ t } | j d � n t | � d k rb | j d
� n | \ } } } | j � } | j d � r� d } nN | j d � r� d } n6 | j d � r� d
} n | j d � r� d } n d
} | | | | g S( s+ splits entry and ensures normalized returnt :t di i t ut usert gt groupt mt maskt ot otherN( t splitt Nonet lowert
startswitht Truet popt lent append( t entryt aR t tt et p( ( s= /usr/lib/python2.7/site-packages/ansible/modules/files/acl.pyt split_entry� s& c C` sE | r d j | | | d g � S| r9 | d | d | S| d | S( sb Builds and returns an entry string. Does not include the permissions bit if they are not provided.R t allow( t join( t etypet entityt permissionst use_nfsv4_acls( ( s= /usr/lib/python2.7/site-packages/ansible/modules/files/acl.pyt build_entry� s
t c C` s� | d k r7 | j d t � g } | j d | g � n~ | d k rn | j d t � g } | j d | g � nG | j d t � g } t � j � d k r� | j d � | j d � n | r� | j d
� n | d k r� | d k r� | j d � n( | d
k r| d k r| j d � n | snt � j � d k rF| j d � qnt � j � d k rn| j d � qnn | r�| j d d � n | j | � | S( s- Builds and returns a getfacl/setfacl command.t sett setfacls -mt rms -xt getfaclt linuxs
--omit-headers --absolute-namess --recursiveR s --maskt no_masks --no-masks
--physicalt freebsds -hi s -d( s setR- ( s setR- ( t get_bin_pathR t extendR R R t insert( t modulet modet patht followt defaultt recursivet recalculate_maskR t cmd( ( s= /usr/lib/python2.7/site-packages/ansible/modules/files/acl.pyt
build_command� s2
c C` sg t � j � d k r t S| } | j d d � t | | � } x! | D] } | j d � sF t SqF Wt S( sP Returns true if the provided command affects the existing ACLs, false otherwise.R1 i s --tests *,*( R R R R4 t run_aclt endswitht False( R5 R< t linest line( ( s= /usr/lib/python2.7/site-packages/ansible/modules/files/acl.pyt acl_changed� s
c C` s� y" | j | d | �\ } } } Wn) t k
rM } | j d t | � � n Xg } x9 | j � D]+ } | j d � sa | j | j � � qa qa W| r� | d j � r� | d S| S( Nt check_rct msgt #i����( t run_commandt Exceptiont fail_jsonR
t
splitlinesR R t stripR ( R5 R< RD t rct outt errR RA t l( ( s= /usr/lib/python2.7/site-packages/ansible/modules/files/acl.pyR> � s "c C` su t d t d t d d d t d d g � d t d d � d t d d d
d � d t d d d
d d d d g � d t d d � d t d d d
d d
d d d g � d t d d d
t � d
t d d d
t � d t d d d
t � d t d d d
d
d
d
d d g � d t d d d
t � � d t � } t � j � d9 k rN| j d d! � n | j j d � } | j j d � } | j j d � } | j j d � } | j j d � } | j j d � } | j j d � } | j j d
� } | j j d � } | j j d � }
| j j d � } t j
j | � s9| j d d" � n | d k r�| r^| j d d# � n |
d: k r�| j d d$ � q�n | s�| d k r�| r�| j d d% � n | d k r�| r�| j d d& � n | d; k r�| r�| j d d' | � q�n | r�| s| s| r)| j d d( � n | d k r]| j d) � d< k r]| j d d, � n | d k r�| j d) � d= k r�| j d d. � n | d k r�| j d d/ � n t
| � \ } } } } | d k r�| } q�n t � j � d k r| r| j d d0 � qn t }
d } | d k r�t | | | | � } t | d1 | | | | |
| � } t | | � }
|
r�| j r�t | | � n d2 | } n� | d k rt | | | � } t | d3 | | | | |
| � } t | | � }
|
r | j r t | | t � n d4 | } n | d k r.d5 } n t | t | d6 | | | | |
� � } | j d7 |
d | d8 | � d S(> Nt
argument_specR7 t typet requiredt aliasest nameR t strR& R9 R* R% t choicesR R R R R' t statet queryt absentt presentR8 t boolR: R; R0 R( t supports_check_modeR/ R1 RE s/ The acl module is not available on this system.s! Path not found or not accessible.s/ 'recursive' MUST NOT be set when 'state=query'.sM 'recalculate_mask' MUST NOT be set to 'mask' or 'no_mask' when 'state=query'.s2 'permissions' MUST NOT be set when 'state=absent'.s) 'entity' MUST be set when 'state=absent'.s$ 'etype' MUST be set when 'state=%s'.sH 'entry' MUST NOT be set when 'entity', 'etype' or 'permissions' are set.R i i sF 'entry' MUST have 3 or 4 sections divided by ':' when 'state=present'.i sE 'entry' MUST have 2 or 3 sections divided by ':' when 'state=absent'.s+ 'entry' MUST NOT be set when 'state=query'.s, recursive is not supported on that platform.R+ s
%s is presentR- s %s is absents current aclt gett changedt acl( s linuxs freebsd( s masks no_mask( RZ RY ( i i ( i i ( R t dictR R@ R R RI t paramsR] t osR7 t existst countR" R R) R= RC t
check_modeR> t exit_json( R5 R7 R R& R% R' RW R8 R9 R: R; R( t default_flagR^ RE t commandR_ ( ( s= /usr/lib/python2.7/site-packages/ansible/modules/files/acl.pyt main s� !!
!t __main__( t
__future__R R R RQ t
__metaclass__t ANSIBLE_METADATAt
DOCUMENTATIONt EXAMPLESt RETURNRb t ansible.module_utils.basicR R t ansible.module_utils._textR
R" R R@ R) R= RC R R> Ri t __name__( ( ( s= /usr/lib/python2.7/site-packages/ansible/modules/files/acl.pyt <module> s$
S% $ {
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]
Anons79 Mini Shell