restrict playbook execution from specific directory

[K T]

Hi,

Is there a way to restrict playbook execution from specific directory?

For example: I don't want user to execute playbook from home directory and I want to enforce it to be executed from only defined ansible directory

[Brian Coca]

Not an explicit feature, but I can think of a few ways you could do this:
- Have an assert/fail at the start of the playbook that checks
``playbook_dir`` is in the 'allowed paths'.
- Setup selinux/apparmor policies to restrict what files
ansible-playbook can access.
- Add to the check to a custom plugin you always load (callback/connection/?).
- Use a wrapper script or shell alias function that does the check and
then calls the 'real' Ansible CLI.

----------
Brian Coca

[K T]

Thank you Brain.

Any sample wrapper script for callback