Better manage user sudo

2023-07-29 11:34:45 +01:00 · 2023-07-29 11:34:45 +01:00 · 1f1da2d77d
parent ba8f398ac3
commit 1f1da2d77d
2 changed files with 5 additions and 2 deletions
--- a/tasks/packages.yml
+++ b/tasks/packages.yml
@ -37,7 +37,7 @@
    line: "aur_builder ALL=(ALL) NOPASSWD: /usr/bin/pacman"
    create: true
    validate: visudo -cf %s
-    mode: 0644
+    mode: 0640
  changed_when: false

 - name: Install chaotic AUR
--- a/tasks/user.yml
+++ b/tasks/user.yml
@ -21,5 +21,8 @@

 - name: Give user sudo access
  lineinfile:
-    path: /etc/sudoers
+    path: /etc/sudoers.d/00_jake
    line: "{{ user }} ALL=(ALL) ALL"
+    create: true
+    validate: visudo -cf %s
+    mode: 0640