ShellShock fix Ansible playbook for CentOS

centos_shellshock_patch.yml

- hosts: all
  gather_facts: false
  sudo: true
  tasks:
    - name: check for shellshock bash vulnerability
      shell: executable=/bin/bash env x='() { :;}; echo vulnerable'  bash -c "echo this is a test"
      register: test_vuln
    
    - name: update bash from yum if vulnerable
      yum: name=bash
           state=latest
      when: "'vulnerable' in test_vuln.stdout"
    
    - name: Check again and fail if we are still vulnerable
      shell: executable=/bin/bash env x='() { :;}; echo vulnerable'  bash -c "echo this is a test"
      when: "'vulnerable' in test_vuln.stdout"
      register: test_vuln
      failed_when: "'vulnerable' in test_vuln.stdout"

Borrowed heavily from https://github.com/edx/configuration/blob/master/playbooks/roles/security/tasks/security-ubuntu.yml