From efa80ce5a9887da2b1bc5f627bcf9884e9621186 Mon Sep 17 00:00:00 2001 From: Emiliano Vavassori Date: Tue, 8 Nov 2016 22:11:06 +0100 Subject: [PATCH] Fixing #3 and #4 issues from Github. --- roles/init/tasks/mgmtuser.yml | 4 +++- roles/nethcfg/tasks/samba.yml | 13 +++++++++++++ 2 files changed, 16 insertions(+), 1 deletion(-) diff --git a/roles/init/tasks/mgmtuser.yml b/roles/init/tasks/mgmtuser.yml index d5e9507..7624a05 100644 --- a/roles/init/tasks/mgmtuser.yml +++ b/roles/init/tasks/mgmtuser.yml @@ -11,7 +11,9 @@ template: src: sudoers.d dest: /etc/sudoers.d/amgmt - mode: "u=r,g=r" + owner: root + group: root + mode: 0440 validate: "/usr/sbin/visudo -cf %s" - name: Installazione chiave privata PC locale diff --git a/roles/nethcfg/tasks/samba.yml b/roles/nethcfg/tasks/samba.yml index 6177838..04a356f 100644 --- a/roles/nethcfg/tasks/samba.yml +++ b/roles/nethcfg/tasks/samba.yml @@ -104,3 +104,16 @@ shell: /sbin/e-smith/signal-event nethserver-samba-update become: yes when: force_ibay_shared|bool or chk_shared|failed + +# Fixing issue #3 - Configure sudo access for admin on server for operator +# access +# https://github.com/bglug-it/server-config/issues/3 +- name: Configuring sudo access for admin account + lineinfile: + dest: /etc/sudoers.d/admin + line: 'admin ALL=(ALL:ALL) NOPASSWD: ALL' + create: yes + owner: root + group: root + mode: 0440 + validate: 'visudo -cf %s'