external/iiab
1
0
Fork 0
mirror of https://github.com/iiab/iiab.git synced 2025-03-09 15:40:17 +00:00
Code Issues Releases Wiki Activity

/etc/sudoers.d/* files should have permission 0440

Browse source 
@tim-moody: if possible make this same change for roles/js-menu/templates/021_apache_set_time.j2
This commit is contained in:
A Holt 2020-10-10 20:39:50 -04:00 • committed by GitHub
parent bb03210459
commit 83abefea0d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/www_options/tasks/main.yml
View file

@ -86,7 +86,7 @@
template:
src: 020_apache_poweroff.j2
dest: /etc/sudoers.d/020_apache_poweroff
mode: '0755'
mode: '0440'
when: apache_allow_sudo | bool
- name: Remove {{ apache_user }} (per variable apache_user) permission to poweroff, removing /etc/sudoers.d/020_apache_poweroff