infra/ansible
4
5
Fork 5
Code Issues 6 Pull Requests 3 Activity

common: prevent normal users from running su

Browse Source
This commit is contained in:
Markus 2018-06-13 14:43:13 +02:00
parent e5e92ebb44
commit b570b30ad2
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
roles/common/tasks/Debian.yml
View File

@ -62,3 +62,9 @@
- name: Disable hibernation/resume - name: Disable hibernation/resume
copy: src=resume dest=/etc/initramfs-tools/conf.d/resume copy: src=resume dest=/etc/initramfs-tools/conf.d/resume
notify: update-initramfs notify: update-initramfs
- name: Prevent normal users from running su
lineinfile:
path: /etc/pam.d/su
regexp: '^# auth required pam_wheel.so$'
line: 'auth required pam_wheel.so'