# ansible security question /bin/sh

**URL:** <https://forum.ansible.com/t/ansible-security-question-bin-sh/28361>\
**Category:** Ansible Project\
**Created:** [August 18, 2018, 5:10pm UTC](https://forum.ansible.com/t/ansible-security-question-bin-sh/28361 "2018-08-18T17:10:11Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Anil](https://avatars.discourse-cdn.com/v4/letter/a/da6949/32.png) [@Anil](https://forum.ansible.com/u/Anil)\
**Post date:** [August 18, 2018, 5:10pm UTC](https://forum.ansible.com/t/ansible-security-question-bin-sh/28361/1 "2018-08-18T17:10:11Z")

</div>

Hello Folks,

ansible(before 2.4) uses /bin/sh for executing tasks, we want to restrict ansible account in sudo for certain tasks, in the process of this we need to give specifiy /bin/sh in sudoers command list for ansible account.

Now the question is by giving /bin/sh to the ansible user account(service account), user can gain root access automatically by any means? any security implications if i give /bin/sh to ansible account?  
Appreciate if you can guide to any article that shed light on ansible security.