From f7cc13a82542dacc1240a1c79e7722b9e171b142 Mon Sep 17 00:00:00 2001 From: Emiliano Vavassori Date: Tue, 14 Jul 2015 22:47:00 +0200 Subject: [PATCH] Aggiunta per sicurezza permessi sudo senza password a root. --- roles/init/tasks/init.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/roles/init/tasks/init.yml b/roles/init/tasks/init.yml index f81d1c8..e7ba84e 100644 --- a/roles/init/tasks/init.yml +++ b/roles/init/tasks/init.yml @@ -11,6 +11,18 @@ state: present generate_ssh_key: yes +- name: Concessione diritti sudo all'utente root + lineinfile: + dest: /etc/sudoers.d/root + regexp: "^root.*NOPASSWD" + line: "root ALL=(ALL:ALL) NOPASSWD:ALL" + owner: root + group: root + mode: 0440 + create: yes + state: present + validate: '/usr/sbin/visudo -c -f %s' + - name: Concessione diritti sudo all'utente ansible lineinfile: dest: /etc/sudoers.d/amgmt