ansible 2.0 | "remove suid/sgid" task fails

[fitz123]

TASK [ansible-os-hardening : remove suid/sgid bit from all binaries except in system and user whitelist] ***
fatal: [testbuild]: FAILED! => {"failed": true, "msg": "ERROR! 'suid' is undefined"}

Ubuntu 14.04.3 LTS

[fitz123]

my 'ugly' workaround is:

suid_sgid.yml:

• name: gather files from which to remove suids/sgids and remove system white-listed files
  set_fact:
  suid: '{{ (sbit_binaries.stdout_lines|default([])) | difference(os_security_suid_sgid_system_whitelist) }}'
  #when: os_security_suid_sgid_remove_from_unknown

at least it works

[rndmh3ro]

Hi @fitz123, thanks for your suggestion on how to fix this.
There's already a PR pending to fix this, however with a slighty other way. In this other PR suid is ommited, if it is not set before.

[conorsch]

The fix proposed in #63 works well. I'm using a fork for Ansible v2 support until that's merged.