EvoBSD/roles/base/tasks/sudo.yml

31 lines
668 B
YAML

---
- name: "Configure sudoers umask"
ansible.builtin.lineinfile:
dest: /etc/sudoers
insertafter: '# Defaults specification'
line: 'Defaults umask=0077'
validate: 'visudo -cf %s'
tags:
- sudo
- name: "Deactivate sudo insults"
ansible.builtin.lineinfile:
dest: /etc/sudoers
insertafter: 'Defaults umask=0077'
line: 'Defaults !insults'
validate: 'visudo -cf %s'
tags:
- sudo
- name: "Configure sudoers"
ansible.builtin.blockinfile:
state: present
dest: /etc/sudoers
insertafter: EOF
block: |
%evolinux-sudo ALL=(ALL) SETENV: ALL
validate: 'visudo -cf %s'
backup: false
tags:
- sudo