@@ -31,6 +31,7 @@ Ansible Changes By Release

 * Change configuration of defaults to use standard jinja2 instead of custom

   eval() for using variables in the default field of config (https://github.com/ansible/ansible/pull/30650)

+* Fixed precedence and values for become flags and executable settings

 <a id="2.4"></a>

@@ -495,7 +495,7 @@ DEFAULT_BECOME_EXE:

   - {key: become_exe, section: privilege_escalation}

 DEFAULT_BECOME_FLAGS:

   name: Set 'become' executable options

-  default: ~

+  default: ''

   description: Flags to pass to the privilege escalation executable.

   env: [{name: ANSIBLE_BECOME_FLAGS}]

   ini:

@@ -1096,7 +1096,7 @@ DEFAULT_SU_EXE:

   - {key: su_exe, section: defaults}

 DEFAULT_SU_FLAGS:

   name: su flags

-  default: ~

+  default: ''

   deprecated:

     why: In favor of become which is a generic framework

     version: "2.8"

@@ -540,19 +540,13 @@ class PlayContext(Base):

                 command = success_cmd

             # set executable to use for the privilege escalation method, with various overrides

-            exe = self.become_method

-            for myexe in (getattr(self, '%s_exe' % self.become_method, None), self.become_exe):

-                if myexe:

-                    exe = myexe

-                    break

+            exe = self.become_exe or getattr(self, '%s_exe' % self.become_method, self.become_method)

             # set flags to use for the privilege escalation method, with various overrides

-            flags = ''

-            for myflag in (getattr(self, '%s_flags' % self.become_method, None), self.become_flags):

-                if myflag is not None:

-                    flags = myflag

-                    break

+            flags = self.become_flags or getattr(self, '%s_flags' % self.become_method, '')

+            print(exe)

+            print(flags)

             if self.become_method == 'sudo':

                 # If we have a password, we run sudo with a randomly-generated

                 # prompt set using -p. Otherwise we run it with default -n, which makes