Skip to content

Commit

Permalink
Do not change mode of sudoers config file
Browse files Browse the repository at this point in the history
The /etc/sudoers file shipped by distributions uses 0440 permissions.

    -r--r-----. 1 root root 4,3K Jun 20  2023 /etc/sudoers

Prefer not to deviate from the distributions' default.

Resolves #33
  • Loading branch information
stejoo authored and groggemans committed Jan 15, 2024
1 parent f3af280 commit 3d1744f
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion tasks/main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@
dest: '/etc/sudoers'
line: "#includedir {{ sudo_sudoersd_dir }}"
regexp: '^[#@]includedir .*'
mode: "0750"
mode: "0440"
validate: visudo -cf %s

- name: Apply sudoers defaults configuration
Expand Down

0 comments on commit 3d1744f

Please sign in to comment.