mirror of
https://github.com/iiab/iiab.git
synced 2025-02-13 19:52:06 +00:00
28 lines
801 B
YAML
28 lines
801 B
YAML
|
# roles/2-common/tasks/packages.yml also installed sudo, but that's too late
|
||
|
|
- name: 'Install package: sudo'
|
||
|
|
package:
|
||
|
|
name: sudo
|
||
|
|
|
||
|
|
- name: Temporarily make file /etc/sudoers editable (0640)
|
||
|
|
file:
|
||
|
|
path: /etc/sudoers
|
||
|
|
mode: 0640
|
||
|
|
|
||
|
|
- name: '/etc/sudoers: Have sudo log all commands to /var/log/sudo.log -- in addition to the lengthier /var/log/auth.log'
|
||
|
|
lineinfile:
|
||
|
|
path: /etc/sudoers
|
||
|
|
regexp: logfile
|
||
|
|
line: "Defaults logfile = /var/log/sudo.log"
|
||
|
|
|
||
|
|
# Not nec (heavyhanded removal of customizations+comments) given sudo defaults.
|
||
|
|
#- name: Remove all lines that contain 'requiretty'
|
||
|
|
# lineinfile:
|
||
|
|
# path: /etc/sudoers
|
||
|
|
# regexp: requiretty
|
||
|
|
# state: absent
|
||
|
|
|
||
|
|
- name: End editing file /etc/sudoers -- protect it again (0440)
|
||
|
|
file:
|
||
|
|
path: /etc/sudoers
|
||
|
|
mode: 0440
|