ansible-edda/playbooks/roles/system/base/root/tasks/main.yml

---
- name: "disable root shell"
  ansible.builtin.user:
    name: "root"
    shell: "/usr/sbin/nologin"

- name: "disable su for non-wheel users"
  ansible.builtin.copy:
    src: "./su"
    dest: "/etc/pam.d/su"
    mode: 0644
Introduce yamllint 2022-12-18 23:43:40 +01:00			`---`
Split system:base tasks into roles 2022-12-20 17:31:37 +01:00			`- name: "disable root shell"`
Convert common parts of 00-hosts to roles 2022-12-04 15:14:43 +01:00			`ansible.builtin.user:`
			`name: "root"`
			`shell: "/usr/sbin/nologin"`

Split system:base tasks into roles 2022-12-20 17:31:37 +01:00			`- name: "disable su for non-wheel users"`
Convert common parts of 00-hosts to roles 2022-12-04 15:14:43 +01:00			`ansible.builtin.copy:`
Split system:base tasks into roles 2022-12-20 17:31:37 +01:00			`src: "./su"`
Convert common parts of 00-hosts to roles 2022-12-04 15:14:43 +01:00			`dest: "/etc/pam.d/su"`
			`mode: 0644`