change to copy sudoers.d at the directory instead of file level

2026-08-21 16:45:22 -05:00
parent 6cdfecfd8d
commit 01e471ec0f
1 changed files with 24 additions and 13 deletions
@@ -43,27 +43,38 @@
        system: true
        gid: 701

-    - name: Make sure /etc/sudoers.d exists
-      become: true
-      ansible.builtin.file:
-        path: /etc/sudoers.d
-        state: directory
-        owner: root
-        group: root
-        mode: u=rwx,go=
+    # - name: Make sure /etc/sudoers.d exists
+    #   become: true
+    #   ansible.builtin.file:
+    #     path: /etc/sudoers.d
+    #     state: directory
+    #     owner: root
+    #     group: root
+    #     mode: u=rwx,go=

-    - name: Get /etc/sudoers.d/hpf
+    # - name: Get /etc/sudoers.d/hpf
+    #   become: true
+    #   ansible.builtin.copy:
+    #     src: etc/sudoers.d/hpf
+    #     dest: /etc/sudoers.d/hpf
+    #     owner: root
+    #     group: root
+    #     mode: u=rw,go=
+    #     backup: true
+    #     validate: /usr/sbin/visudo -csf %s
+
+    - name: Get /etc/sudoers.d
      become: true
      ansible.builtin.copy:
-        src: etc/sudoers.d/hpf
-        dest: /etc/sudoers.d/hpf
+        src: etc/sudoers.d/
+        dest: /etc/
        owner: root
        group: root
-        mode: u=rw,go=
+        directory_mode: u=rwx,go=
+        mode: u=rw,g=r,o=
        backup: true
        validate: /usr/sbin/visudo -csf %s

-
 #### Configure sshd

 #   - name: Make sure /etc/ssh/sshd_config.d exists