--- - name: Verify Evolinux sudoers file presence template: src: sudoers_{{ ansible_distribution_release }}.j2 dest: /etc/sudoers.d/evolinux force: no validate: '/usr/sbin/visudo -cf %s' register: copy_sudoers_evolinux - name: Verify Evolinux sudoers file permissions file: path: /etc/sudoers.d/evolinux mode: "0440" state: file - name: "Add user in sudoers file for '{{ user.name }}'" replace: dest: /etc/sudoers.d/evolinux regexp: '^(User_Alias\s+ADMINS\s+=((?!{{ user.name }}).)*)$' replace: '\1,{{ user.name }}' validate: '/usr/sbin/visudo -cf %s' when: - ansible_distribution == "Debian" - ansible_distribution_major_version | version_compare('9', '<') - not copy_sudoers_evolinux.changed