# is su\_exe/become\_exe broken in v2?

**URL:** <https://forum.ansible.com/t/is-su-exe-become-exe-broken-in-v2/19164>\
**Category:** Ansible Project\
**Created:** [September 2, 2015, 10:02am UTC](https://forum.ansible.com/t/is-su-exe-become-exe-broken-in-v2/19164 "2015-09-02T10:02:39Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Edgars](https://avatars.discourse-cdn.com/v4/letter/e/f17d59/32.png) [@Edgars](https://forum.ansible.com/u/Edgars)\
**Post date:** [September 2, 2015, 10:02am UTC](https://forum.ansible.com/t/is-su-exe-become-exe-broken-in-v2/19164/1 "2015-09-02T10:02:39Z")

</div>

Hi

I just pulled latest ansible from git and installed it. And it seems that su\_exe functionality is not working anymore. Regardless of what I set as su\_exe, ansible tries to execute su. I also tried to set become\_exe to something else not su but ansible executes su.

`[privilege_escalation] become = True become_ask_pass = True become_user = root become_method = su become_exe = /opt/CA/AccessControl/bin/sesu become_flags = -`

> EXEC /bin/sh -c ‘su root -c “/bin/sh -c '”’"'echo BECOME-SUCCESS-qvthdnsaxbhytsulkyamdelobeatwxnn;

Edgars

---

<div class="post-metadata">

**Author:** ![Brian\_Coca](https://avatars.discourse-cdn.com/v4/letter/b/6de8d8/32.png) [@Brian\_Coca](https://forum.ansible.com/u/Brian_Coca)\
**Post date:** [September 2, 2015, 1:28pm UTC](https://forum.ansible.com/t/is-su-exe-become-exe-broken-in-v2/19164/2 "2015-09-02T13:28:57Z")

</div>

I just fixed this, pull latest and try again.

---

<div class="post-metadata">

**Author:** ![Edgars](https://avatars.discourse-cdn.com/v4/letter/e/f17d59/32.png) [@Edgars](https://forum.ansible.com/u/Edgars)\
**Post date:** [September 2, 2015, 1:43pm UTC](https://forum.ansible.com/t/is-su-exe-become-exe-broken-in-v2/19164/3 "2015-09-02T13:43:23Z")

</div>

Thanks, it works now with su\_exe but still does not work with become\_exe. But I am not sure if it supposed to be working with become\_exe.

Edgar

trešdiena, 2015. gada 2. septembris 12:02:39 UTC+2, Edgars rakstīja:

---

<div class="post-metadata">

**Author:** ![Brian\_Coca](https://avatars.discourse-cdn.com/v4/letter/b/6de8d8/32.png) [@Brian\_Coca](https://forum.ansible.com/u/Brian_Coca)\
**Post date:** [September 2, 2015, 1:51pm UTC](https://forum.ansible.com/t/is-su-exe-become-exe-broken-in-v2/19164/4 "2015-09-02T13:51:57Z")

</div>

just fixed become\_exe also

---

<div class="post-metadata">

**Author:** ![Edgars](https://avatars.discourse-cdn.com/v4/letter/e/f17d59/32.png) [@Edgars](https://forum.ansible.com/u/Edgars)\
**Post date:** [September 2, 2015, 2:16pm UTC](https://forum.ansible.com/t/is-su-exe-become-exe-broken-in-v2/19164/5 "2015-09-02T14:16:11Z")

</div>

Confirmed

trešdiena, 2015. gada 2. septembris 15:52:02 UTC+2, Brian Coca rakstīja:

---

<div class="post-metadata">

**Author:** ![Edgars](https://avatars.discourse-cdn.com/v4/letter/e/f17d59/32.png) [@Edgars](https://forum.ansible.com/u/Edgars)\
**Post date:** [September 2, 2015, 2:50pm UTC](https://forum.ansible.com/t/is-su-exe-become-exe-broken-in-v2/19164/6 "2015-09-02T14:50:39Z")

</div>

I just noticed that su\_flags and become\_flags settings are ignored.

Edgars

trešdiena, 2015. gada 2. septembris 12:02:39 UTC+2, Edgars rakstīja:

---

<div class="post-metadata">

**Author:** ![Brian\_Coca](https://avatars.discourse-cdn.com/v4/letter/b/6de8d8/32.png) [@Brian\_Coca](https://forum.ansible.com/u/Brian_Coca)\
**Post date:** [September 2, 2015, 3:02pm UTC](https://forum.ansible.com/t/is-su-exe-become-exe-broken-in-v2/19164/7 "2015-09-02T15:02:12Z")

</div>

They currently only work for sudo

---

<div class="post-metadata">

**Author:** ![Edgars](https://avatars.discourse-cdn.com/v4/letter/e/f17d59/32.png) [@Edgars](https://forum.ansible.com/u/Edgars)\
**Post date:** [September 2, 2015, 3:09pm UTC](https://forum.ansible.com/t/is-su-exe-become-exe-broken-in-v2/19164/8 "2015-09-02T15:09:14Z")

</div>

su\_flags worked before, why it was changed?

trešdiena, 2015. gada 2. septembris 17:02:22 UTC+2, Brian Coca rakstīja:

---

<div class="post-metadata">

**Author:** ![Brian\_Coca](https://avatars.discourse-cdn.com/v4/letter/b/6de8d8/32.png) [@Brian\_Coca](https://forum.ansible.com/u/Brian_Coca)\
**Post date:** [September 2, 2015, 3:18pm UTC](https://forum.ansible.com/t/is-su-exe-become-exe-broken-in-v2/19164/9 "2015-09-02T15:18:27Z")

</div>

Not as much 'changed' as 'yet to be implemented'.