Add 'roles/ensure_sudo/' from commit 'de4fc58c9753aa4d5bb339d6cd0757cbd4e25e20'

git-subtree-dir: roles/ensure_sudo
git-subtree-mainline: 328ebb72c0
git-subtree-split: de4fc58c97
This commit is contained in:
2026-05-10 21:43:48 -05:00
153 changed files with 6680 additions and 0 deletions
@@ -0,0 +1,40 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
...