Let's say I have a salt-master and decide to run some arbitrary command in all my minions. But because I had a bad night, I was robbed on my way to work, my boss yelled at me for being late and my co-workers decided to play on me that nasty joke with pins and needles, instead of doing a harmless:
salt '*' cmd.run "rm -rf /var/tmp/some/directory/with/redundant/data"
What comes out is:
salt '*' cmd.run "rm -rf /"
Disaster! Is there any way that I can "blacklist" certain commands so they can't be executed using cmd.run?
Thanks in advance.