AnsiblePlaybooks/test
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add 'roles/ensure_sudo/' from commit '50a7fc890b6096327610c65d40a9e53d60374711'

Browse Source 
git-subtree-dir: roles/ensure_sudo
git-subtree-mainline: 539b7449e4
git-subtree-split: 50a7fc890b
This commit is contained in:
Jason Rothstein
2026-05-10 21:43:48 -05:00
parent 539b7449e4 50a7fc890b
commit 568c8cbfcb
153 changed files with 6680 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/ensure_sudo/vars/AlmaLinux-10-default.yml
+40
View File
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
roles/ensure_sudo/vars/AlmaLinux-8-default.yml
+40
View File
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
roles/ensure_sudo/vars/AlmaLinux-9-default.yml
+40
View File
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
roles/ensure_sudo/vars/CentOS-10-default.yml
+40
View File
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
roles/ensure_sudo/vars/CentOS-8-default.yml
+40
View File
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
roles/ensure_sudo/vars/CentOS-9-default.yml
+40
View File
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
roles/ensure_sudo/vars/Fedora-42-default.yml
+40
View File
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
roles/ensure_sudo/vars/Fedora-43-default.yml
+40
View File
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
roles/ensure_sudo/vars/Fedora-44-default.yml
+40
View File
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
roles/ensure_sudo/vars/OracleLinux-10-default.yml
+40
View File
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
roles/ensure_sudo/vars/OracleLinux-8-default.yml
+40
View File
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
roles/ensure_sudo/vars/OracleLinux-9-default.yml
+40
View File
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
roles/ensure_sudo/vars/Rocky-10-default.yml
+40
View File
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
roles/ensure_sudo/vars/Rocky-8-default.yml
+40
View File
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
roles/ensure_sudo/vars/Rocky-9-default.yml
+40
View File
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
roles/ensure_sudo/vars/default.yml
+2
View File
@@ -0,0 +1,2 @@
---
# vars file for ensure_sudo
roles/ensure_sudo/vars/main.yml
+2
View File
@@ -0,0 +1,2 @@
---
# vars file for ensure_sudo