common: prevent normal users from running su

This commit is contained in:
Markus 2018-06-13 14:43:13 +02:00
parent e5e92ebb44
commit b570b30ad2

View File

@ -62,3 +62,9 @@
- name: Disable hibernation/resume
copy: src=resume dest=/etc/initramfs-tools/conf.d/resume
notify: update-initramfs
- name: Prevent normal users from running su
lineinfile:
path: /etc/pam.d/su
regexp: '^# auth required pam_wheel.so$'
line: 'auth required pam_wheel.so'