diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2015-05-31 23:17:17 +0200 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2015-06-07 02:54:02 +0200 |
| commit | be2733485e51024e3274c36cf4ecd38418c3d610 (patch) | |
| tree | c7f017498214258906e2be16f39ea329a9ab5edc /roles | |
| parent | acb068b4a5af0654d21c2830655b7c6156a2b845 (diff) | |
Prefer '/usr/sbin/nologin' over '/bin/false' for system users.
Diffstat (limited to 'roles')
| -rw-r--r-- | roles/IMAP-proxy/tasks/main.yml | 2 | ||||
| -rw-r--r-- | roles/IMAP/tasks/imap.yml | 2 | ||||
| -rw-r--r-- | roles/lists/tasks/mlmmj.yml | 2 |
3 files changed, 3 insertions, 3 deletions
diff --git a/roles/IMAP-proxy/tasks/main.yml b/roles/IMAP-proxy/tasks/main.yml index 2ddba96..7773cb3 100644 --- a/roles/IMAP-proxy/tasks/main.yml +++ b/roles/IMAP-proxy/tasks/main.yml @@ -1,32 +1,32 @@ - name: Install Dovecot #apt: pkg={{ item }} default_release={{ ansible_lsb.codename }}-backports apt: pkg={{ item }} with_items: - dovecot-core - dovecot-imapd - name: Create a user 'imapproxy' user: name=imapproxy system=yes createhome=no home=/home/imapproxy - shell=/bin/false + shell=/usr/sbin/nologin password=! state=present - name: Create a home directory for user 'imapproxy' file: path=/home/imapproxy state=directory owner=imapproxy group=imapproxy mode=0700 - name: Configure Dovecot copy: src=etc/dovecot/conf.d/{{ item }} dest=/etc/dovecot/conf.d/{{ item }} owner=root group=root mode=0644 register: r with_items: - 10-auth.conf - 10-logging.conf - 10-mail.conf - 10-master.conf diff --git a/roles/IMAP/tasks/imap.yml b/roles/IMAP/tasks/imap.yml index 9365640..e7023e7 100644 --- a/roles/IMAP/tasks/imap.yml +++ b/roles/IMAP/tasks/imap.yml @@ -1,36 +1,36 @@ - name: Install Dovecot apt: pkg={{ item }} with_items: - dovecot-core - dovecot-ldap - dovecot-imapd - dovecot-lmtpd - dovecot-antispam - dovecot-managesieved - dovecot-sieve - name: Create a user 'vmail' user: name=vmail system=yes createhome=no home=/home/mail - shell=/bin/false + shell=/usr/sbin/nologin password=! state=present ## TODO: make a LDAP query listing all users using iterate_attrs and ## iterate_filter. (Alternatively, use a dict, see ## https://www.opensource.apple.com/source/dovecot/dovecot-293/dovecot.Config/dovecot-dict-auth.conf.ext) ## Required for dbox, see ## http://wiki2.dovecot.org/MailboxFormat/dbox#Multi-dbox #- name: Create a nightly cron job to purge expunged messages # cron: name="Purge expunged messages" # minute=7 hour=5 # user=vmail cron_file=doveadm-purge # job="/usr/bin/doveadm purge -A" # The ownership and permissions ensure that dovecot won't try to # deliver mails under an umounted mountpoint. - name: Create a home directory for user 'vmail' file: path=/home/mail state=directory owner=root group=root diff --git a/roles/lists/tasks/mlmmj.yml b/roles/lists/tasks/mlmmj.yml index 51d779f..e5e029f 100644 --- a/roles/lists/tasks/mlmmj.yml +++ b/roles/lists/tasks/mlmmj.yml @@ -1,31 +1,31 @@ - name: Install MLMMJ apt: pkg={{ item }} with_items: - mlmmj # Weird the debian package doesn't do it by itself... - name: Create a user 'mlmmj' user: name=mlmmj system=yes createhome=no home=/var/spool/mlmmj - shell=/bin/false + shell=/usr/sbin/nologin password=! state=present - name: Add 'www-data' to the group 'mlmmj' user: name=www-data groups=mlmmj append=yes - name: Create a home directory for user 'mlmmj' file: path=/var/spool/mlmmj state=directory owner=mlmmj group=mlmmj mode=0700 - name: Create /var/lib/mlmmj file: path=/var/lib/mlmmj state=directory owner=mlmmj group=mlmmj mode=0750 - name: Auto-maintain mlmmj's spool directory copy: src=etc/cron.d/mlmmj |