45 lines
1.3 KiB
YAML
45 lines
1.3 KiB
YAML
---
|
|
# vars file for ensure_sudo
|
|
package_list:
|
|
- name: libsss_sudo
|
|
state: present
|
|
- name: sudo
|
|
state: present
|
|
template_list:
|
|
- dest: /etc/dnf/protected.d/sudo.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/dnf/protected.d/sudo.conf'
|
|
- dest: /etc/pam.d/sudo
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/pam.d/sudo'
|
|
- dest: /etc/pam.d/sudo-i
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/pam.d/sudo-i'
|
|
- dest: /etc/sudo.conf
|
|
group: root
|
|
mode: '0640'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/sudo.conf'
|
|
- dest: /etc/sudoers
|
|
group: root
|
|
mode: '0440'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/sudoers'
|
|
- dest: /etc/sudoers.d/session_log
|
|
group: root
|
|
mode: '0440'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/sudoers.d/session_log.j2'
|