community.general.pfexec – profile based execution

string

"pfexec"

ini entries:

[privilege_escalation]
become_exe = pfexec

[pfexec_become_plugin]
executable = pfexec

env:ANSIBLE_BECOME_EXE

env:ANSIBLE_PFEXEC_EXE

var: ansible_become_exe

var: ansible_pfexec_exe

Sudo executable

string

"-H -S -n"

ini entries:

[privilege_escalation]
become_flags = -H -S -n

[pfexec_become_plugin]
flags = -H -S -n

env:ANSIBLE_BECOME_FLAGS

env:ANSIBLE_PFEXEC_FLAGS

var: ansible_become_flags

var: ansible_pfexec_flags

Options to pass to pfexec

string

ini entries:

[pfexec_become_plugin]
password = None

env:ANSIBLE_BECOME_PASS

env:ANSIBLE_PFEXEC_PASS

var: ansible_become_password

var: ansible_become_pass

var: ansible_pfexec_pass

pfexec password

string

"root"

ini entries:

[privilege_escalation]
become_user = root

[pfexec_become_plugin]
user = root

env:ANSIBLE_BECOME_USER

env:ANSIBLE_PFEXEC_USER

var: ansible_become_user

var: ansible_pfexec_user

User you 'become' to execute the task

This plugin ignores this setting as pfexec uses it's own exec_attr to figure this out, but it is supplied here for Ansible to make decisions needed for the task execution, like file permissions.

boolean

ini entries:

[pfexec_become_plugin]
wrap_execution = no

env:ANSIBLE_PFEXEC_WRAP_EXECUTION

var: ansible_pfexec_wrap_execution

Toggle to wrap the command pfexec calls in 'shell -c' or not