1
1
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2025-01-18 08:06:16 +01:00
infrastructure/roles/sudo/tasks/main.yml
Evangelos Foutras b10c667b8e
sudo: drop task that sets secure_path in sudoers
sudo 1.9.15.p5-2 enables secure_path by default.
2024-08-03 21:14:46 +03:00

26 lines
684 B
YAML

- name: Install sudo
pacman: name=sudo state=present
# https://github.com/ansible/ansible/issues/11024
- name: Remove all users from wheel group
command: groupmems -g wheel --purge
register: groupmems
changed_when: "groupmems.rc == 0"
- name: Add sudo users to wheel
user: name="{{ item }}" append=yes groups=wheel
with_items: "{{ sudo_users }}"
tags: ['archusers']
- name: Allow wheel group to use sudo
lineinfile:
dest: /etc/sudoers
state: present
regexp: '^%wheel ALL=\(ALL:ALL\) ALL'
insertafter: '^# %wheel ALL=\(ALL:ALL\) ALL'
line: '%wheel ALL=(ALL:ALL) ALL'
validate: 'visudo -cf %s'
mode: '0440'
owner: root
group: root