From db3fe9cb3a58bf44e8d23839d69e0881ac9de7bf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Th=C3=A9o?= <theo@le-filament.com>
Date: Mon, 26 Sep 2022 18:42:55 +0200
Subject: [PATCH] add template validation for sudoers and sshd_config
---
tasks/main.yml | 2 ++
1 file changed, 2 insertions(+)
diff --git a/tasks/main.yml b/tasks/main.yml
index 86c2b90..aa851ab 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -100,6 +100,7 @@
owner: root
group: root
mode: '440'
+ validate: /usr/sbin/visudo -cf %s
tags: sudoers
- name: add public key to authorized keys for {{ host_user }}
@@ -135,6 +136,7 @@
owner: root
group: root
mode: '0644'
+ validate: /usr/sbin/sshd -t -f %s
notify: restart-sshd
tags: sshd
--
GitLab