Configure sudoers umask

This configuration is checked by evocheck, so it should be present by default
2020-10-08 15:42:52 +02:00 · 2020-10-08 15:42:52 +02:00 · fa497b280e
parent 12b2f3d280
commit fa497b280e
1 changed files with 9 additions and 0 deletions
--- a/roles/base/tasks/sudo.yml
+++ b/roles/base/tasks/sudo.yml
@ -1,4 +1,13 @@
 ---
+- name: Configure sudoers umask
+  lineinfile:
+    dest: /etc/sudoers
+    insertafter: '# Defaults specification'
+    line: 'Defaults umask=0077'
+    validate: 'visudo -cf %s'
+  tags:
+    - sudo
+
 # dont't break the tab!
 - name: Allow wheel group to run command as root in sudo
  lineinfile: