https://github.com/ahuffman/ansible-role-scan-sudoers
An Ansible role to collect Ansible Facts on sudoers files
https://github.com/ahuffman/ansible-role-scan-sudoers
ansible ansible-facts ansible-role sudo sudoers
Last synced: 2 months ago
JSON representation
An Ansible role to collect Ansible Facts on sudoers files
- Host: GitHub
- URL: https://github.com/ahuffman/ansible-role-scan-sudoers
- Owner: ahuffman
- Created: 2019-03-05T22:23:18.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2021-07-19T21:51:40.000Z (almost 5 years ago)
- Last Synced: 2025-01-23T06:28:14.839Z (over 1 year ago)
- Topics: ansible, ansible-facts, ansible-role, sudo, sudoers
- Language: Python
- Size: 20.5 KB
- Stars: 1
- Watchers: 2
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# ahuffman.scan_sudoers
An Ansible Role to parse /etc/sudoers and included files on a Linux/Unix system. This Role contains a custom Ansible module which returns the parsed sudoers data.
## scan_sudoers Ansible Module
The module can be called with its defaults by invoking a task in the following way:
```yaml
- name: "Scan Sudoers configuration"
scan_sudoers:
```
### Module Parameters
| Parameter Name | Description | Required | Default Value | Type |
| --- | --- | --- | :---: | :---: |
| output_raw_configs | Whether or not to output the raw (non-comment) configuration lines | no | True | boolean |
| output_parsed_configs | Whether or not to parse the configuration into fact data | no | True | boolean |
### Returned Data Sample
```yaml
ansible_facts:
sudoers:
all_scanned_files:
- /etc/sudoers.d/XPERM_AIX
- /etc/sudoers.d/TEST_2
- /etc/sudoers
sudoers_files:
- aliases:
cmnd_alias:
- commands:
- /bin/ping
name: PING
- commands:
- /bin/ping
- /sbin/ifconfig
name: TEST
- commands:
- /usr/sbin/mkfs
name: BEST
host_alias:
- hosts:
- huff-satellite
- huff-rhel7
name: SOMEHOSTS
- hosts:
- test1
- test2
- test3
name: SOMEGHOSTS
- hosts:
- thathost1
name: ANOTHER
runas_alias:
- name: HUFF
users:
- ahuffman
- root
- name: TEST
users:
- root
user_alias:
- name: HUFF
users:
- ahuffman
- root
- name: TEST
users:
- root
defaults:
- '!visiblepw'
- env_reset
- secure_path:
- /usr/local/sbin
- /usr/local/bin
- /usr/sbin
- /usr/bin
- /sbin
- /bin
- env_keep:
- COLORS
- DISPLAY
- HOSTNAME
- HISTSIZE
- KDEDIR
- LS_COLORS
- MAIL
- PS1
- PS2
- QTDIR
- USERNAME
- LANG
- LC_ADDRESS
- LC_CTYPE
- LC_COLLATE
- LC_IDENTIFICATION
- LC_MEASUREMENT
- LC_MESSAGES
- LC_MONETARY
- LC_NAME
- LC_NUMERIC
- LC_PAPER
- LC_TELEPHONE
- LC_TIME
- LC_ALL
- LANGUAGE
- LINGUAS
- _XKB_CHARSET
- XAUTHORITY
include_directories:
- /etc/sudoers.d
include_files:
- /etc/sudoers.d/XPERM_AIX
- /etc/sudoers.d/TEST_2
path: /etc/sudoers
user_specifications:
- commands:
- ALL
hosts:
- ALL
operators:
- ALL
users:
- root
- commands:
- ALL
hosts:
- ALL
operators:
- ALL
tags:
- NOPASSWD
users:
- '%wheel'
- commands:
- /sbin/mount /mnt/cdrom
- /sbin/umount /mnt/cdrom
hosts:
- ALL
users:
- ahuffman
...
```
## License
[MIT](LICENSE)
## Author Information
[Andrew J. Huffman](mailto:ahuffman@redhat.com)