ansible/ansible — pull request #5893 by xyrix (2014-02-06 09:01:08+00:00)
Title: Accerate mode: Vulnerability fix/allowed finer grain configuration

Accelerate mode saves the key files to ~/.fireball.keys/ with world readable permissions by default. This is clearly not acceptable as an attacker can then trivially access the accelerated daemon by having a cronjob which checks for these keys in all user home directories.

In addition, if multiple users want to be able to use the same ansible script, they have to wait for the previous user's daemon to timeout before they will be able to run the script - as the previous user's daemon is hogging the fireball port but the new user does not have the correct keys. Hence, I have allowed the fireball keys directory and files to have their location and permissions configured so that they may be in one global place and given group access to everyone in some group associated with ansible deployment.