Remove ansible from default policy as unsafe to open w/o params. (#84)

Snowflake-Labs · Mar 3, 2022 · 4ddb054 · 4ddb054
1 parent 6c6e929
commit 4ddb054
Showing 1 changed file with 0 additions and 4 deletions.
diff --git a/cmd/sansshell-server/default-policy.rego b/cmd/sansshell-server/default-policy.rego
@@ -40,10 +40,6 @@ allow {
 	input.type = "Process.GetStacksRequest"
 }
 
-allow {
-	input.type = "Ansible.RunRequest"
-}
-
 allow {
 	input.type = "Packages.ListInstalledRequest"
 }