Optimized sudoers for security

2024-09-20 00:13:09 +02:00 · 2021-01-01 13:28:17 +01:00 · 2021-01-01 13:28:17 +01:00 · c45fa6ce94
commit c45fa6ce94
parent cc9a90e590
2 changed files with 4 additions and 11 deletions
--- a/roles/native-sudo/templates/sudoers
+++ b/roles/native-sudo/templates/sudoers
--- a/roles/native-sudo/tasks/main.yml
+++ b/roles/native-sudo/tasks/main.yml
@ -2,16 +2,9 @@
  pacman: name=sudo state=present

 - name: create sudoers
-  template: src=sudoers dest=/etc/sudoers
-
- name: insure group "sudo" exists
-  group:
-    name: sudo
-    state: present
-
- name: set /etc/sudoers
-  file:
-    path: /etc/sudoers
+  copy:
+    src:  sudoers
+    dest: /etc/sudoers
+    mode: "0440"
    owner: root
    group: root
-    mode: 0440