From: Andrew Schoen Date: Mon, 22 Jun 2015 15:00:53 +0000 (-0500) Subject: cobbler: set the mode to 0440 on /etc/sudoers.d/cephlab_sudo X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=refs%2Fpull%2F53%2Fhead;p=ceph-cm-ansible.git cobbler: set the mode to 0440 on /etc/sudoers.d/cephlab_sudo Apparently most other distros default anything in /etc/sudoers.d to 0440 except precise. Precise, by default, sets the mode of /etc/sudoers.d/cephlab_sudo to 0664 which completely breaks sudo usage. This makes cobbler explicitly set the mode to 0440. Signed-off-by: Andrew Schoen --- diff --git a/roles/cobbler/templates/snippets/cephlab_user b/roles/cobbler/templates/snippets/cephlab_user index d85ad82a..456ce473 100644 --- a/roles/cobbler/templates/snippets/cephlab_user +++ b/roles/cobbler/templates/snippets/cephlab_user @@ -13,6 +13,8 @@ Defaults !requiretty Defaults visiblepw EOF +chmod 0440 /etc/sudoers.d/cephlab_sudo + install -d -m0755 --owner=$user --group=$user /home/$user/.ssh cat >> $auth_keys << EOF