René Jochum
10 years ago
1 changed files with 2 additions and 2 deletions
+ 2
- 2
users/init.sls
View File
| file.managed: | file.managed: | ||||
| - name: {{ users.sudoers_dir }}/{{ name }} | - name: {{ users.sudoers_dir }}/{{ name }} | ||||
| - user: root | - user: root | ||||
| - group: {{ users.root_group }} | |||||
| - group: {{ users.root_group }} | |||||
| - mode: '0440' | - mode: '0440' | ||||
| {% if 'sudo_rules' in user %} | {% if 'sudo_rules' in user %} | ||||
| {% for rule in user['sudo_rules'] %} | {% for rule in user['sudo_rules'] %} | ||||
| cmd.run: | cmd.run: | ||||
| - name: 'visudo -cf - <<<"$rule" | { read output; if [[ $output != "stdin: parsed OK" ]] ; then echo $output ; fi }' | - name: 'visudo -cf - <<<"$rule" | { read output; if [[ $output != "stdin: parsed OK" ]] ; then echo $output ; fi }' | ||||
| - stateful: True | - stateful: True | ||||
| - shell: {{ users.visudo_shell }} | |||||
| - shell: {{ users.visudo_shell }} | |||||
| - env: | - env: | ||||
| # Specify the rule via an env var to avoid shell quoting issues. | # Specify the rule via an env var to avoid shell quoting issues. | ||||
| - rule: "{{ name }} {{ rule }}" | - rule: "{{ name }} {{ rule }}" |
Loading…