evolix/ansible-roles
22
2
Fork 2
Code Issues 61 Pull requests 18 Releases 32 Wiki Activity

Update PermitRootLogin task to work on Debian 11
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse source
This commit is contained in:
Ludovic Poujol 2022-06-21 15:13:33 +02:00
parent 050c61c220
commit 519ef930df
3 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
CHANGELOG.md
View file

@ -16,6 +16,9 @@ The **patch** part changes is incremented if multiple releases happen the same m
### Fixed ### Fixed
* evolinux-base : Update PermitRootLogin task to work on Debian 11
* evolinux-user : Update PermitRootLogin task to work on Debian 11
### Removed ### Removed
### Security ### Security

2
evolinux-base/tasks/root.yml
View file

@ -91,7 +91,7 @@
- name: disable SSH access for root - name: disable SSH access for root
replace: replace:
dest: /etc/ssh/sshd_config dest: /etc/ssh/sshd_config
regexp: '^PermitRootLogin (yes|without-password|prohibit-password)' regexp: '^#?PermitRootLogin (yes|without-password|prohibit-password)'
replace: "PermitRootLogin no" replace: "PermitRootLogin no"
validate: '/usr/sbin/sshd -t -f %s' validate: '/usr/sbin/sshd -t -f %s'
notify: reload sshd notify: reload sshd

2
evolinux-users/tasks/ssh.yml
View file

@ -56,7 +56,7 @@
- name: disable root login - name: disable root login
replace: replace:
dest: /etc/ssh/sshd_config dest: /etc/ssh/sshd_config
regexp: '^PermitRootLogin (yes|without-password|prohibit-password)' regexp: '^#PermitRootLogin (yes|without-password|prohibit-password)'
replace: "PermitRootLogin no" replace: "PermitRootLogin no"
notify: reload sshd notify: reload sshd
when: evolinux_root_disable_ssh | bool when: evolinux_root_disable_ssh | bool