---
# vars file for ensure_sudo
package_list:
  - name: libsss_sudo
    state: present
  - name: sudo
    state: present
template_list:
  - dest: /etc/dnf/protected.d/sudo.conf
    group: root
    mode: '0644'
    owner: root
    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
      }}/etc/dnf/protected.d/sudo.conf'
  - dest: /etc/pam.d/sudo
    group: root
    mode: '0644'
    owner: root
    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
      }}/etc/pam.d/sudo'
  - dest: /etc/pam.d/sudo-i
    group: root
    mode: '0644'
    owner: root
    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
      }}/etc/pam.d/sudo-i'
  - dest: /etc/sudo.conf
    group: root
    mode: '0640'
    owner: root
    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
      }}/etc/sudo.conf'
  - dest: /etc/sudoers
    group: root
    mode: '0440'
    owner: root
    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
      }}/etc/sudoers'
  - dest: /etc/sudoers.d/session_log
    group: root
    mode: '0440'
    owner: root
    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
      }}/etc/sudoers.d/session_log.j2'