aurore/ansible
aurore/ansible
11
2
Fork 0
Code Issues 1 Pull requests 13 Releases Wiki Activity

sudo group by location

Browse source
This commit is contained in:
Alexandre Iooss 2019-03-23 13:49:53 +01:00
parent a8d8e312e0
commit 489bb5ddcf
No known key found for this signature in database
GPG key ID: 6C79278F3FCDCC02
2 changed files with 12 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
group_vars/pacaterie/sudo_location_group.yml Normal file
View file

@ -0,0 +1,3 @@
---
# Users in that group will be able to `sudo`
sudo_group_location: 'sudopacaterie'

10
roles/ldap-client/tasks/1_group_security.yml
View file

@ -16,8 +16,16 @@
until: package_result is succeeded until: package_result is succeeded
# Set sudo group # Set sudo group
- name: Configure sudoers - name: Configure sudoers sudo group
lineinfile: lineinfile:
dest: /etc/sudoers dest: /etc/sudoers
regexp: "^%{{ sudo_group }}" regexp: "^%{{ sudo_group }}"
line: "%{{ sudo_group }} ALL=(ALL:ALL) ALL" line: "%{{ sudo_group }} ALL=(ALL:ALL) ALL"
# Set sudo location group
- name: Configure sudoers sudo location group
lineinfile:
dest: /etc/sudoers
regexp: "^%{{ sudo_group_location }}"
line: "%{{ sudo_group_location }} ALL=(ALL:ALL) ALL"
when: sudo_group_location is defined