Imagemagick-CVE-2016-5118.yml

---
- hosts: all
  become: true
  gather_facts: false

  tasks:
    - name: check which policy.xml exist
      stat:
        path: "{{ item }}/policy.xml"
      with_items:
        - /etc/ImageMagick
        - /etc/ImageMagick-6
        - /etc/ImageMagick-7
        - /usr/local/etc/ImageMagick
        - /usr/local/etc/ImageMagick-6
        - /usr/local/etc/ImageMagick-7
      register: policy_xml

    - name: for every policy.xml that exists ensure lines are in the config
      lineinfile:
        dest: "{{ item.0.item }}/policy.xml"
        insertbefore: "</policymap>"
        line: "{{ item.1 }}"
      with_nested:
        - "{{ policy_xml.results }}"
        - ['  <policy domain="path" rights="none" pattern="|*" />',
          ]
      when: item.0.stat.exists