makes it possible to set different values for motd via sshd and pam.
Also create a backup file of pam configuration, to allow user to restore
the previous settings.
Signed-off-by: Martin Schurz <[email protected]>
* add additional check for efi
some systems seem to require vfat because of efi, despite not exposing a
/sys/firmware/efi directory.
Signed-off-by: Martin Schurz <[email protected]>
* make linter happy
Signed-off-by: Martin Schurz <[email protected]>
* rework check to check for all used filesystems
so we don't break existing mounts with our configuration
Signed-off-by: Martin Schurz <[email protected]>
* do not check this on el6
Signed-off-by: Martin Schurz <[email protected]>
* add comment to clarify
Signed-off-by: Martin Schurz <[email protected]>
* fix problem with package_facts on SuSE
SuSE Linux does not work with ansibel module packet_facts, so we need to
exclude this task there.
Signed-off-by: Martin Schurz <[email protected]>
* fix local docker tests for all distributions
Signed-off-by: Martin Schurz <[email protected]>
* fix local vagrant tests for all distributions
Signed-off-by: Martin Schurz <[email protected]>
* simplify travis tests
Signed-off-by: Martin Schurz <[email protected]>
* fix opensuse in travis
Signed-off-by: Martin Schurz <[email protected]>
* add fixes for suse
Signed-off-by: Martin Schurz <[email protected]>
* add special case for suse docker
Signed-off-by: Martin Schurz <[email protected]>
Numbers with leading zeros need to be quoted in Ansible, otherwise they
are interpreted as octal. Which the templating happily writes out in...
decimal.
In this case, sftp_umask 0027 was ending up as 23 in sshd.conf.
Signed-off-by: Alex Waite <[email protected]>
* rework CRYPTO_POLICY handling for fedora
the previous implementation did not handle fedora right. Now we check if
a CRYPTO_POLICY is present regardless of the OS version.
Signed-off-by: Martin Schurz <[email protected]>
* improve tasks for CRYPTO_POLICY
Signed-off-by: Martin Schurz <[email protected]>
* add exception for Archlinux
Signed-off-by: Martin Schurz <[email protected]>
* swap conditions
Signed-off-by: Martin Schurz <[email protected]>
schurzi