# Ansible task runs as root

An Ansible play or task that sets become: true or become: yes outside a comment.

Area: Security

## What you need to supply

The playbook text. Ansible facts are not executed.

## If it reports a finding

High severity. The suggested next step is to set become to false unless the task has a reviewed need to run as root.

## What this does not prove

A play with become: false and no public CIDR is not this finding. become: true in a comment is not a finding.

## Task that this check is written to notice

```
- hosts: all
  tasks:
    - name: install
      become: true
```

Reading this page does not submit infrastructure. The HTML page is https://skaleagents.com/checks/ansible-task-runs-as-root.