AnsiblePlaybooks/test
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add fail2ban role and clean up yaml lint noise

Browse Source
This commit is contained in:
jmrothst
2026-08-08 23:50:32 -05:00
parent 9b837dd780
commit 6c7ecfc724
352 changed files with 4632 additions and 4186 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/ensure_sudo/vars/AlmaLinux-10-default.yml
+34 -30
View File
@@ -1,40 +1,44 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
- name: libsss_sudo
state: present
- name: sudo
state: present
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
- dest: /etc/dnf/protected.d/sudo.conf
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/dnf/protected.d/sudo.conf'
- dest: /etc/pam.d/sudo
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo'
- dest: /etc/pam.d/sudo-i
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo-i'
- dest: /etc/sudo.conf
group: root
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudo.conf'
- dest: /etc/sudoers
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers'
- dest: /etc/sudoers.d/session_log
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers.d/session_log.j2'
roles/ensure_sudo/vars/AlmaLinux-9-default.yml
+34 -30
View File
@@ -1,40 +1,44 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
- name: libsss_sudo
state: present
- name: sudo
state: present
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
- dest: /etc/dnf/protected.d/sudo.conf
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/dnf/protected.d/sudo.conf'
- dest: /etc/pam.d/sudo
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo'
- dest: /etc/pam.d/sudo-i
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo-i'
- dest: /etc/sudo.conf
group: root
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudo.conf'
- dest: /etc/sudoers
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers'
- dest: /etc/sudoers.d/session_log
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers.d/session_log.j2'
roles/ensure_sudo/vars/CentOS-10-default.yml
+34 -30
View File
@@ -1,40 +1,44 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
- name: libsss_sudo
state: present
- name: sudo
state: present
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
- dest: /etc/dnf/protected.d/sudo.conf
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/dnf/protected.d/sudo.conf'
- dest: /etc/pam.d/sudo
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo'
- dest: /etc/pam.d/sudo-i
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo-i'
- dest: /etc/sudo.conf
group: root
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudo.conf'
- dest: /etc/sudoers
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers'
- dest: /etc/sudoers.d/session_log
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers.d/session_log.j2'
roles/ensure_sudo/vars/CentOS-9-default.yml
+34 -30
View File
@@ -1,40 +1,44 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
- name: libsss_sudo
state: present
- name: sudo
state: present
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
- dest: /etc/dnf/protected.d/sudo.conf
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/dnf/protected.d/sudo.conf'
- dest: /etc/pam.d/sudo
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo'
- dest: /etc/pam.d/sudo-i
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo-i'
- dest: /etc/sudo.conf
group: root
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudo.conf'
- dest: /etc/sudoers
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers'
- dest: /etc/sudoers.d/session_log
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers.d/session_log.j2'
roles/ensure_sudo/vars/Fedora-42-default.yml
+34 -30
View File
@@ -1,40 +1,44 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
- name: libsss_sudo
state: present
- name: sudo
state: present
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
- dest: /etc/dnf/protected.d/sudo.conf
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/dnf/protected.d/sudo.conf'
- dest: /etc/pam.d/sudo
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo'
- dest: /etc/pam.d/sudo-i
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo-i'
- dest: /etc/sudo.conf
group: root
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudo.conf'
- dest: /etc/sudoers
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers'
- dest: /etc/sudoers.d/session_log
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers.d/session_log.j2'
roles/ensure_sudo/vars/Fedora-43-default.yml
+34 -30
View File
@@ -1,40 +1,44 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
- name: libsss_sudo
state: present
- name: sudo
state: present
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
- dest: /etc/dnf/protected.d/sudo.conf
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/dnf/protected.d/sudo.conf'
- dest: /etc/pam.d/sudo
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo'
- dest: /etc/pam.d/sudo-i
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo-i'
- dest: /etc/sudo.conf
group: root
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudo.conf'
- dest: /etc/sudoers
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers'
- dest: /etc/sudoers.d/session_log
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers.d/session_log.j2'
roles/ensure_sudo/vars/Fedora-44-default.yml
+34 -30
View File
@@ -1,40 +1,44 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
- name: libsss_sudo
state: present
- name: sudo
state: present
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
- dest: /etc/dnf/protected.d/sudo.conf
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/dnf/protected.d/sudo.conf'
- dest: /etc/pam.d/sudo
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo'
- dest: /etc/pam.d/sudo-i
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo-i'
- dest: /etc/sudo.conf
group: root
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudo.conf'
- dest: /etc/sudoers
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers'
- dest: /etc/sudoers.d/session_log
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers.d/session_log.j2'
roles/ensure_sudo/vars/OracleLinux-10-default.yml
+34 -30
View File
@@ -1,40 +1,44 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
- name: libsss_sudo
state: present
- name: sudo
state: present
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
- dest: /etc/dnf/protected.d/sudo.conf
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/dnf/protected.d/sudo.conf'
- dest: /etc/pam.d/sudo
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo'
- dest: /etc/pam.d/sudo-i
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo-i'
- dest: /etc/sudo.conf
group: root
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudo.conf'
- dest: /etc/sudoers
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers'
- dest: /etc/sudoers.d/session_log
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers.d/session_log.j2'
roles/ensure_sudo/vars/OracleLinux-9-default.yml
+34 -30
View File
@@ -1,40 +1,44 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
- name: libsss_sudo
state: present
- name: sudo
state: present
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
- dest: /etc/dnf/protected.d/sudo.conf
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/dnf/protected.d/sudo.conf'
- dest: /etc/pam.d/sudo
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo'
- dest: /etc/pam.d/sudo-i
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo-i'
- dest: /etc/sudo.conf
group: root
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudo.conf'
- dest: /etc/sudoers
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers'
- dest: /etc/sudoers.d/session_log
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers.d/session_log.j2'
roles/ensure_sudo/vars/Rocky-10-default.yml
+34 -30
View File
@@ -1,40 +1,44 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
- name: libsss_sudo
state: present
- name: sudo
state: present
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
- dest: /etc/dnf/protected.d/sudo.conf
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/dnf/protected.d/sudo.conf'
- dest: /etc/pam.d/sudo
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo'
- dest: /etc/pam.d/sudo-i
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo-i'
- dest: /etc/sudo.conf
group: root
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudo.conf'
- dest: /etc/sudoers
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers'
- dest: /etc/sudoers.d/session_log
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers.d/session_log.j2'
roles/ensure_sudo/vars/Rocky-9-default.yml
+34 -30
View File
@@ -1,40 +1,44 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
- name: libsss_sudo
state: present
- name: sudo
state: present
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
- dest: /etc/dnf/protected.d/sudo.conf
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/dnf/protected.d/sudo.conf'
- dest: /etc/pam.d/sudo
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo'
- dest: /etc/pam.d/sudo-i
group: root
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/pam.d/sudo-i'
- dest: /etc/sudo.conf
group: root
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudo.conf'
- dest: /etc/sudoers
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers'
- dest: /etc/sudoers.d/session_log
group: root
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...
owner: root
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/sudoers.d/session_log.j2'
roles/ensure_sudo/vars/default.yml
+1 -1
View File
@@ -1,2 +1,2 @@
---
# vars file for ensure_sudo
...
roles/ensure_sudo/vars/main.yml
+1 -1
View File
@@ -1,2 +1,2 @@
---
# vars file for ensure_sudo
...