diff options
| author | Ralph Bean <rbean@redhat.com> | 2015-09-25 18:46:53 +0000 |
|---|---|---|
| committer | Ralph Bean <rbean@redhat.com> | 2015-09-25 18:46:53 +0000 |
| commit | 05bb9f4f8313562555c3bb30a6a2c4b42c68883e (patch) | |
| tree | 5d39f28680bcaef7bb775a18ea124078647ae999 | |
| parent | 83ed40ce7f6c93c2eb2288e1166021fabac4c836 (diff) | |
| download | ansible-05bb9f4f8313562555c3bb30a6a2c4b42c68883e.tar.gz ansible-05bb9f4f8313562555c3bb30a6a2c4b42c68883e.tar.xz ansible-05bb9f4f8313562555c3bb30a6a2c4b42c68883e.zip | |
Ensure that our sysadmin-main sudoers file comes first.
| -rw-r--r-- | roles/sudo/tasks/main.yml | 17 |
1 files changed, 13 insertions, 4 deletions
diff --git a/roles/sudo/tasks/main.yml b/roles/sudo/tasks/main.yml index 780287e22..6b70b1d85 100644 --- a/roles/sudo/tasks/main.yml +++ b/roles/sudo/tasks/main.yml @@ -6,23 +6,32 @@ # # Put in place the default sysadmin-main sudoers file. # -- name: setup /etc/sudoers.d/sysadmin-main - copy: src="{{ private }}/files/sudo/sysadmin-main" dest=/etc/sudoers.d/ owner=root group=root mode=0600 +- name: setup /etc/sudoers.d/01-sysadmin-main + copy: src="{{ private }}/files/sudo/sysadmin-main" dest=/etc/sudoers.d/01-sysadmin-main owner=root group=root mode=0600 when: sudoers_main is not defined tags: - config - sudo - sudoers + # # Put in place the default sysadmin-main sudoers file. (nopasswd edition) # -- name: setup /etc/sudoers.d/sysadmin-main (nopasswd) - copy: src="{{ private }}/files/sudo/sysadmin-main-nopasswd" dest=/etc/sudoers.d/ owner=root group=root mode=0600 +- name: setup /etc/sudoers.d/01-sysadmin-main (nopasswd) + copy: src="{{ private }}/files/sudo/sysadmin-main-nopasswd" dest=/etc/sudoers.d/01-sysadmin-main owner=root group=root mode=0600 when: sudoers_main is defined and sudoers_main == 'nopasswd' tags: - config - sudo - sudoers + +- name: remove old sysadmin-main file if its still around + file: dest=/etc/sudoers.d/sysadmin-main state=absent + tags: + - config + - sudo + - sudoers + # # This will move a /etc/sudoers.d/ file in place # |