Skip to content

Commit 625308a

Browse files
committed
Use community.general.sudoers for unprivileged_user sudoers control
1 parent 27e491c commit 625308a

1 file changed

Lines changed: 4 additions & 7 deletions

File tree

roles/unprivileged_user/tasks/main.yml

Lines changed: 4 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -18,13 +18,10 @@
1818
become: true
1919

2020
- name: "Grant passwordless sudo via {{ unprivileged_user_groupname }} group"
21-
ansible.builtin.lineinfile:
22-
dest: "/etc/sudoers.d/{{ unprivileged_user_groupname }}"
23-
state: present
24-
regexp: '^%{{ unprivileged_user_groupname }}'
25-
line: '%{{ unprivileged_user_groupname }} ALL=(ALL) NOPASSWD: ALL'
26-
validate: '/usr/sbin/visudo -cf %s'
27-
create: yes
21+
community.general.sudoers:
22+
name: "{{ unprivileged_user_groupname }}"
23+
group: "{{ unprivileged_user_groupname }}"
24+
commands: ALL
2825
become: true
2926

3027
- name: "Add public key to authorized_keys from Host Machine"

0 commit comments

Comments
 (0)