change to copy sudoers.d at the directory instead of file level
This commit is contained in:
+24
-13
@@ -43,27 +43,38 @@
|
|||||||
system: true
|
system: true
|
||||||
gid: 701
|
gid: 701
|
||||||
|
|
||||||
- name: Make sure /etc/sudoers.d exists
|
# - name: Make sure /etc/sudoers.d exists
|
||||||
become: true
|
# become: true
|
||||||
ansible.builtin.file:
|
# ansible.builtin.file:
|
||||||
path: /etc/sudoers.d
|
# path: /etc/sudoers.d
|
||||||
state: directory
|
# state: directory
|
||||||
owner: root
|
# owner: root
|
||||||
group: root
|
# group: root
|
||||||
mode: u=rwx,go=
|
# mode: u=rwx,go=
|
||||||
|
|
||||||
- name: Get /etc/sudoers.d/hpf
|
# - name: Get /etc/sudoers.d/hpf
|
||||||
|
# become: true
|
||||||
|
# ansible.builtin.copy:
|
||||||
|
# src: etc/sudoers.d/hpf
|
||||||
|
# dest: /etc/sudoers.d/hpf
|
||||||
|
# owner: root
|
||||||
|
# group: root
|
||||||
|
# mode: u=rw,go=
|
||||||
|
# backup: true
|
||||||
|
# validate: /usr/sbin/visudo -csf %s
|
||||||
|
|
||||||
|
- name: Get /etc/sudoers.d
|
||||||
become: true
|
become: true
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
src: etc/sudoers.d/hpf
|
src: etc/sudoers.d/
|
||||||
dest: /etc/sudoers.d/hpf
|
dest: /etc/
|
||||||
owner: root
|
owner: root
|
||||||
group: root
|
group: root
|
||||||
mode: u=rw,go=
|
directory_mode: u=rwx,go=
|
||||||
|
mode: u=rw,g=r,o=
|
||||||
backup: true
|
backup: true
|
||||||
validate: /usr/sbin/visudo -csf %s
|
validate: /usr/sbin/visudo -csf %s
|
||||||
|
|
||||||
|
|
||||||
#### Configure sshd
|
#### Configure sshd
|
||||||
|
|
||||||
# - name: Make sure /etc/ssh/sshd_config.d exists
|
# - name: Make sure /etc/ssh/sshd_config.d exists
|
||||||
|
|||||||
Reference in New Issue
Block a user