Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Ensure that our sysadmin-main sudoers file comes first.

Browse source
This commit is contained in:
Ralph Bean 2015-09-25 18:46:53 +00:00
parent 83ed40ce7f
commit 05bb9f4f83
1 changed files with 13 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

17
roles/sudo/tasks/main.yml
View file

@ -6,23 +6,32 @@
#
# Put in place the default sysadmin-main sudoers file.
#
- name: setup /etc/sudoers.d/sysadmin-main
copy: src="{{ private }}/files/sudo/sysadmin-main" dest=/etc/sudoers.d/ owner=root group=root mode=0600
- name: setup /etc/sudoers.d/01-sysadmin-main
copy: src="{{ private }}/files/sudo/sysadmin-main" dest=/etc/sudoers.d/01-sysadmin-main owner=root group=root mode=0600
when: sudoers_main is not defined
tags:
- config
- sudo
- sudoers
#
# Put in place the default sysadmin-main sudoers file. (nopasswd edition)
#
- name: setup /etc/sudoers.d/sysadmin-main (nopasswd)
copy: src="{{ private }}/files/sudo/sysadmin-main-nopasswd" dest=/etc/sudoers.d/ owner=root group=root mode=0600
- name: setup /etc/sudoers.d/01-sysadmin-main (nopasswd)
copy: src="{{ private }}/files/sudo/sysadmin-main-nopasswd" dest=/etc/sudoers.d/01-sysadmin-main owner=root group=root mode=0600
when: sudoers_main is defined and sudoers_main == 'nopasswd'
tags:
- config
- sudo
- sudoers
- name: remove old sysadmin-main file if its still around
file: dest=/etc/sudoers.d/sysadmin-main state=absent
tags:
- config
- sudo
- sudoers
#
# This will move a /etc/sudoers.d/ file in place
#