shell_shock.yml

---
# this play queries all servers and creates groups
- hosts: all
  remote_user: root
  # remote_user: someuser
  # sudo: true
  
  tasks:
  - name: create dynamic groups based on OS
    group_by: key=ansible_os_family
      
# this play applies the patch only to Red Hat machines
- hosts: RedHat      
  remote_user: root
  
  tasks:
  - name: Update bash for RHEL/CentOS
    yum: name=bash state=latest
    
# this play applies the patch only to Debian machines
- hosts: Debian      
  remote_user: root
  
  tasks:
  - name: Update bash for Ubuntu/Debian
    apt: name=bash state=latest update_cache=yes