Add 'roles/ensure_sudo/' from commit '50a7fc890b6096327610c65d40a9e53d60374711'

git-subtree-dir: roles/ensure_sudo
git-subtree-mainline: 539b7449e4
git-subtree-split: 50a7fc890b
This commit is contained in:
2026-05-10 21:43:48 -05:00
153 changed files with 6680 additions and 0 deletions
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...