mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-06-11 19:25:54 +00:00
dc0a5585fb
This patch adds the following attributes to ipasudorule:
- order
- sudooption
- runasuser
- runasgroup
It also fixes behavior of sudocmd assigned to the the sudorule, with the
adittion of the attributes:
- allow_sudocmds
- deny_sudocmds
- allow_sudocmdgroups
- deny_sudocmdgroups
README-sudorule and tests have been updated to comply with the changes.
21 lines
368 B
YAML
21 lines
368 B
YAML
---
|
|
- name: Tests
|
|
hosts: ipaserver
|
|
become: true
|
|
gather_facts: false
|
|
|
|
tasks:
|
|
- ipasudorule:
|
|
ipaadmin_password: MyPassword123
|
|
name: testrule1
|
|
allow_sudocmd:
|
|
- /sbin/ifconfig
|
|
deny_sudocmd:
|
|
- /usr/bin/vim
|
|
allow_sudocmdgroup:
|
|
- devops
|
|
deny_sudocmdgroup:
|
|
- users
|
|
action: member
|
|
state: absent
|