diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2017-05-14 23:13:52 +0200 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2017-05-14 23:13:52 +0200 |
| commit | fcc12720a977c754b1e7ef79d67410b445caf065 (patch) | |
| tree | a6455c2b5ddd9b98a0e4cbe230d8039e275d1cef /roles/common | |
| parent | 32508606f6bac9d0b5e0eedbbaa5074d2200251b (diff) | |
Change group of executables in /usr/local/{bin,sbin} from root to staff.
Diffstat (limited to 'roles/common')
| -rw-r--r-- | roles/common/tasks/firewall.yml | 2 | ||||
| -rw-r--r-- | roles/common/tasks/main.yml | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/roles/common/tasks/firewall.yml b/roles/common/tasks/firewall.yml index 29c0e2b..d418326 100644 --- a/roles/common/tasks/firewall.yml +++ b/roles/common/tasks/firewall.yml @@ -3,38 +3,38 @@ with_items: - iptables - netmask - bsdutils - name: Create directory /etc/iptables file: path=/etc/iptables state=directory owner=root group=root mode=0755 - name: Generate /etc/iptables/services template: src=etc/iptables/services.j2 dest=/etc/iptables/services owner=root group=root mode=0600 - name: Copy /usr/local/sbin/update-firewall.sh copy: src=usr/local/sbin/update-firewall.sh dest=/usr/local/sbin/update-firewall.sh - owner=root group=root + owner=root group=staff mode=0755 - name: Make the rulesets persistent copy: src=etc/network/{{ item }} dest=/etc/network/{{ item }} owner=root group=root mode=0755 with_items: - if-pre-up.d/iptables - if-post-down.d/iptables - name: Ensure the firewall is up to date command: /usr/local/sbin/update-firewall.sh -c register: rv # A non-zero return value will make ansible stop and show stderr. This # is what we want. changed_when: rv.rc diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml index 2fe7a0e..0230c0c 100644 --- a/roles/common/tasks/main.yml +++ b/roles/common/tasks/main.yml @@ -21,41 +21,41 @@ - include: auditd.yml tags: auditd - include: rkhunter.yml tags: rkhunter - include: clamav.yml tags: clamav - include: fail2ban.yml tags: fail2ban - include: smart.yml tags: - smartmontools - smart when: "not ((ansible_virtualization_role == 'guest' and ansible_virtualization_type == 'xen') or ansible_system_vendor == 'QEMU')" - include: haveged.yml tags: - haveged - entropy - name: Copy genkeypair.sh and gendhparam.sh copy: src=usr/local/bin/{{ item }} dest=/usr/local/bin/{{ item }} - owner=root group=root + owner=root group=staff mode=0755 tags: genkey with_items: - genkeypair.sh - gendhparam.sh - name: Generate DH parameters command: gendhparam.sh /etc/ssl/dhparams.pem 2048 creates=/etc/ssl/dhparams.pem tags: genkey - include: ipsec.yml tags: - strongswan - ipsec when: "groups.all | length > 1" - include: logging.yml tags: logging - include: ntp.yml tags: ntp - include: mail.yml tags: |