ansible/utils/sudo_upgrade.yml
Otthorn 1611f4a93c
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
[utils] move the sudo_upgrade playbook with other utils
2021-03-12 01:59:03 +01:00

17 lines
506 B
YAML
Executable file

#!/usr/bin/env ansible-playbook
---
# This is a special playbook to upgrade sudo everywhere after the
# CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit)
# Please always use with --limit myserver.adm.auro.re
# And list updates with --check
- hosts: all
tasks:
- name: Upgrade sudo
apt:
name: sudo
state: latest
update_cache: true
cache_valid_time: 3600 # one hour
register: apt_result
retries: 3
until: apt_result is succeeded