geerlingguy / ansible-role-security

Ansible Role - Security

Home Page:https://galaxy.ansible.com/geerlingguy/security/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

sudoes file given more permission than needed

staticdev opened this issue · comments

sudoes file needs 0400 and it is being edited with 0644. Let's apply the least privileged principle from Ansible for Devops of @geerlingguy ;)

It looks like it's actually 440 by default on a fresh install of Debian at least:

-r--r-----   1 root root    669 Feb 27  2021 sudoers

@geerlingguy I updated the PR and switched to Debian's default then.