# Running Ansible on a whitelisted system

**URL:** <https://forum.ansible.com/t/running-ansible-on-a-whitelisted-system/29414>\
**Category:** Ansible Developer\
**Created:** [January 10, 2019, 4:31pm UTC](https://forum.ansible.com/t/running-ansible-on-a-whitelisted-system/29414 "2019-01-10T16:31:41Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sandra\_Carney](https://avatars.discourse-cdn.com/v4/letter/s/958977/32.png) [@Sandra\_Carney](https://forum.ansible.com/u/Sandra_Carney)\
**Post date:** [January 10, 2019, 4:31pm UTC](https://forum.ansible.com/t/running-ansible-on-a-whitelisted-system/29414/1 "2019-01-10T16:31:41Z")

</div>

All,

We are using whitelisting software from McAfee. It is called **Solidifier**. When enabled, it prevents execution of non-solidified executables. In practical terms, that means that when Ansible creates a temporary python script and attempts to execute, it is blocked by **Solidifier**.  
There are a number of workarounds availble. The easy ones have been ruled out for security reasons and those have to do with putting **Solidifier** in update mode, run **ansible-playbook** , and then re-enable it.

Other things I have tried:

- In /etc/ansible.cfg, I enabled pipelining. BTW, I made sure requiretty is disabled in /etc/sudoers. Turning this on didn’t help.
- I also tried setting ANSIBLE\_PIPELINING environment variable and ANSIBLE\_SSH\_PIPELINING environment variable. This is a redundancy but I was throwing spagetti against the wall to see what would stick.  
I also noticed a special\_context\_filesystems in the [selinux] section so enabled that.

Nothing helped.

I attached a file in which I captured the output from ansible.

Is there a way to prevent ansible from creating temporary python scripts and then attempting to run them?

> **(attachments)**
>
> [ansible\_failure](https://forum.ansible.com/uploads/short-url/q2J4XdqoWjQBy9BJeel9hQpe8yg) (1.37 KB)

---

<div class="post-metadata">

**Author:** ![Sandra\_Carney](https://avatars.discourse-cdn.com/v4/letter/s/958977/32.png) [@Sandra\_Carney](https://forum.ansible.com/u/Sandra_Carney)\
**Post date:** [January 10, 2019, 6:31pm UTC](https://forum.ansible.com/t/running-ansible-on-a-whitelisted-system/29414/2 "2019-01-10T18:31:39Z")

</div>

A couple more things:

- OS: CentOS 7.5
- ansible-playbook version: 2.7.0
- ansible version: 2.7.0
- I am running ansible-playbook locally.
