AnsibleRoles/ensure_sudo
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add Alma/CentOS/Oracle/Rocky 9

Browse Source 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
This commit is contained in:
Jason Rothstein
2024-06-30 23:04:25 -05:00
parent 0c312ee0ad
commit 1114295b03
46 changed files with 2013 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
vars/AlmaLinux-9-default.yml Normal file
View File

@@ -0,0 +1,38 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/sudoers.d/session_log.j2'

38
vars/CentOS-9-default.yml Normal file
View File

@@ -0,0 +1,38 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/sudoers.d/session_log.j2'

38
vars/OracleLinux-9-default.yml Normal file
View File

@@ -0,0 +1,38 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/sudoers.d/session_log.j2'

38
vars/Rocky-9-default.yml Normal file
View File

@@ -0,0 +1,38 @@
---
# vars file for ensure_sudo
package_list:
- name: 'libsss_sudo'
state: 'present'
- name: 'sudo'
state: 'present'
template_list:
- dest: '/etc/dnf/protected.d/sudo.conf'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/dnf/protected.d/sudo.conf'
- dest: '/etc/pam.d/sudo'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/pam.d/sudo'
- dest: '/etc/pam.d/sudo-i'
group: 'root'
mode: '0644'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/pam.d/sudo-i'
- dest: '/etc/sudo.conf'
group: 'root'
mode: '0640'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/sudo.conf'
- dest: '/etc/sudoers'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/sudoers'
- dest: '/etc/sudoers.d/session_log'
group: 'root'
mode: '0440'
owner: 'root'
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/sudoers.d/session_log.j2'