Questions about sudo password accepted with -K argument

Archives Ansible Project
1

Hello Ansible experts:

Can you please let me know what is done with the password accepted with the -K argument.

Is it in memory only, in a file in /tmp ?

Is it encrypted? If so, how specifically.

Is it available anywhere on the file system for a snooper to see?

Is it deleted after the command is finished?

If the ansible playbook execution is killed halfway through via kill -9, is this password left out on the file system anywhere?

I tried running with strace and lsof and snooping around. I should not be able to find it, right?

John

2

It is in memory until the playbook end, it gets passed to remote hosts under the connection (which is encrypted) when prompted for.

It should not be written to disk in any circumstance

3

Thanks!