diff --git a/roles/init/tasks/mgmtuser.yml b/roles/init/tasks/mgmtuser.yml index d5e9507..7624a05 100644 --- a/roles/init/tasks/mgmtuser.yml +++ b/roles/init/tasks/mgmtuser.yml @@ -11,7 +11,9 @@ template: src: sudoers.d dest: /etc/sudoers.d/amgmt - mode: "u=r,g=r" + owner: root + group: root + mode: 0440 validate: "/usr/sbin/visudo -cf %s" - name: Installazione chiave privata PC locale diff --git a/roles/nethcfg/tasks/samba.yml b/roles/nethcfg/tasks/samba.yml index 6177838..04a356f 100644 --- a/roles/nethcfg/tasks/samba.yml +++ b/roles/nethcfg/tasks/samba.yml @@ -104,3 +104,16 @@ shell: /sbin/e-smith/signal-event nethserver-samba-update become: yes when: force_ibay_shared|bool or chk_shared|failed + +# Fixing issue #3 - Configure sudo access for admin on server for operator +# access +# https://github.com/bglug-it/server-config/issues/3 +- name: Configuring sudo access for admin account + lineinfile: + dest: /etc/sudoers.d/admin + line: 'admin ALL=(ALL:ALL) NOPASSWD: ALL' + create: yes + owner: root + group: root + mode: 0440 + validate: 'visudo -cf %s'