Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

lineinfile is evil

Browse source
This commit is contained in:
Kevin Fenzi 2018-05-27 00:46:56 +00:00
parent 270b6f92a3
commit 07709f793b
2 changed files with 16 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

15
files/common/mock Normal file
View file

@ -0,0 +1,15 @@
%PAM-1.0
auth sufficient pam_rootok.so
auth sufficient pam_succeed_if.so user ingroup mock use_uid quiet
# Uncomment the following line to implicitly trust users in the "wheel" group.
#auth sufficient pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
#auth required pam_wheel.so use_uid
auth include system-auth
account sufficient pam_succeed_if.so user ingroup mock use_uid quiet
account include system-auth
password include system-auth
session include system-auth
account sufficient pam_succeed_if.so user ingroup packager use_uid quiet
auth sufficient pam_succeed_if.so user ingroup packager use_uid quiet
session optional pam_xauth.so

3
playbooks/groups/maintainer-test.yml
View file

@ -61,8 +61,7 @@
- packages
- name: allow packagers to use mock
lineinfile: dest=/etc/pam.d/mock line="{{ item }} sufficient pam_succeed_if.so user ingroup packager use_uid quiet" insertbefore=BOF
when: ansible_distribution_major_version|int > 23
copy: dest=/etc/pam.d/mock src="{{ files }}/common/mock
with_items:
- account
- auth