Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/oefenweb/ansible-sudoers

Ansible role to manage sudoers and sudoers.d in Debian-like systems
https://github.com/oefenweb/ansible-sudoers

ansible debian manage-sudoers privileges sudoers ubuntu

Last synced: about 1 month ago
JSON representation

Ansible role to manage sudoers and sudoers.d in Debian-like systems

Host: GitHub
URL: https://github.com/oefenweb/ansible-sudoers
Owner: Oefenweb
License: mit
Created: 2015-08-21T09:45:03.000Z (over 9 years ago)
Default Branch: master
Last Pushed: 2023-11-02T11:07:21.000Z (about 1 year ago)
Last Synced: 2023-11-02T11:37:46.470Z (about 1 year ago)
Topics: ansible, debian, manage-sudoers, privileges, sudoers, ubuntu
Language: Jinja
Size: 104 KB
Stars: 8
Watchers: 3
Forks: 11
Open Issues: 2
Metadata Files:
- Readme: README.md
- License: LICENSE.txt

Awesome Lists containing this project

README

## sudoers

[![CI](https://github.com/Oefenweb/ansible-sudoers/workflows/CI/badge.svg)](https://github.com/Oefenweb/ansible-sudoers/actions?query=workflow%3ACI)
[![Ansible Galaxy](http://img.shields.io/badge/ansible--galaxy-sudoers-blue.svg)](https://galaxy.ansible.com/Oefenweb/sudoers)

Manage sudoers and sudoers.d in Debian-like systems.

#### Requirements

None

#### Variables

* `sudoers_sudoers`: `/etc/sudoers` file declarations
* `sudoers_sudoers.defaults`: [default: see `defaults/main.yml`]: Default configuration options
* `sudoers_sudoers.host_aliases`: [default: `[]`]: A list of aliases of type `Host_Alias`
* `sudoers_sudoers.host_aliases.name`: Name of the alias
* `sudoers_sudoers.host_aliases.members`: Member(s) of the alias
* `sudoers_sudoers.user_aliases`: [default: `[]`]: A list of aliases of type `User_Alias`
* `sudoers_sudoers.user_aliases.name`: Name of the alias
* `sudoers_sudoers.user_aliases.members`: Member(s) of the alias
* `sudoers_sudoers.cmnd_aliases`: [default: `[]`]: A list of aliases of type `Cmnd_Alias`
* `sudoers_sudoers.cmnd_aliases.name`: Name of the alias
* `sudoers_sudoers.cmnd_aliases.members`: Member(s) of the alias
* `sudoers_sudoers.runas_aliases`: [default: `[]`]: A list of aliases of type `Runas_Alias`
* `sudoers_sudoers.runas_aliases.name`: Name of the alias
* `sudoers_sudoers.runas_aliases.members`: Member(s) of the alias
* `sudoers_sudoers.privileges`: [default: see `defaults/main.yml`]: List of privileges
* `sudoers_sudoers.privileges.name`: Name of user or group (group should be prefixed with '%')
* `sudoers_sudoers.privileges.entry`: A privilege entry

* `sudoers_sudoers_d_files` [default: `{}`]: `/etc/sudoers.d/*` file(s) declarations
* `sudoers_sudoers_d_files.key`: The name of the sudoers configuration file (e.g `vagrant`)
* `sudoers_sudoers_d_files.key.defaults` [default: `[]`]: Default configuration options
* `sudoers_sudoers_d_files.key.host_aliases` [default: `[]`]: A list of aliases of type `Host_Alias`
* `sudoers_sudoers_d_files.key.host_aliases.name`: Name of the alias
* `sudoers_sudoers_d_files.key.host_aliases.members`: Member(s) of the alias
* `sudoers_sudoers_d_files.key.user_aliases` [default: `[]`]: A list of aliases of type `User_Alias`
* `sudoers_sudoers_d_files.key.user_aliases.name`: Name of the alias
* `sudoers_sudoers_d_files.key.user_aliases.members`: Member(s) of the alias
* `sudoers_sudoers_d_files.key.cmnd_aliases` [default: `[]`]: A list of aliases of type `Cmnd_Alias`
* `sudoers_sudoers_d_files.key.cmnd_aliases.name`: Name of the alias
* `sudoers_sudoers_d_files.key.cmnd_aliases.members`: Member(s) of the alias
* `sudoers_sudoers_d_files.key.runas_aliases` [default: `[]`]: A list of aliases of type `Runas_Alias`
* `sudoers_sudoers_d_files.key.runas_aliases.name`: Name of the alias
* `sudoers_sudoers_d_files.key.runas_aliases.members`: Member(s) of the alias
* `sudoers_sudoers_d_files.key.privileges` [default: `[]`]: List of privileges
* `sudoers_sudoers_d_files.key.privileges.name`: Name of user or group (group should be prefixed with '%')
* `sudoers_sudoers_d_files.key.privileges.entry`: A privilege entry

* `sudoers_sudoers_d_directory_mode` [default: keep as is]: Directory mode for `/etc/sudoers.d`, e.g. `'0750'`

## Dependencies

None

#### Example(s)

##### Simple configuration

```yaml
---
- hosts: all
roles:
- oefenweb.sudoers
```

##### Complex configuration

```yaml
---
- hosts: all
roles:
- oefenweb.sudoers
vars:
sudoers_sudoers:
defaults:
- env_reset
- exempt_group=sudo
- mail_badpass
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
host_aliases:
- name: CUNETS
members: 128.138.0.0/255.255.0.0
- name: SERVERS
members: master, mail, www, ns
user_aliases:
- name: FULLTIMERS
members: millert, mikef, dowdy
- name: PARTTIMERS
members: bostley, jwfox, crawl
cmnd_aliases:
- name: KILL
members: /usr/bin/kill
- name: HALT
members: /usr/sbin/halt
privileges:
- name: root
entry: "ALL=(ALL:ALL) ALL"
- name: "%admin"
entry: "ALL=(ALL) ALL"
- name: "%sudo"
entry: "ALL=NOPASSWD:ALL"
sudoers_sudoers_d_files:
test:
defaults:
- env_reset
- exempt_group=sudo
- mail_badpass
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
host_aliases:
- name: WORKSTATIONS
members: 128.138.0.0/255.255.0.0
privileges:
- name: test
entry: "ALL=(ALL:ALL) ALL"
```

#### License

MIT

#### Author Information

* Mark van Driel
* Mischa ter Smitten

#### Feedback, bug-reports, requests, ...

Are [welcome](https://github.com/Oefenweb/ansible-sudoers/issues)!