CroneKorkN
5659559b40
visudo -c reported "bad permissions, should be mode 0440" for every file in /etc/sudoers.d. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01RywMtsL8qXG7GDY3MHq9Uh
17 lines
427 B
Python
17 lines
427 B
Python
directories = {
|
|
'/etc/sudoers.d': {
|
|
'mode': '0750',
|
|
#'purge': True, # FIXME: purge after managed sudoers are ready
|
|
},
|
|
}
|
|
|
|
for user, commands in node.metadata.get('sudoers').items():
|
|
files[f'/etc/sudoers.d/{user}'] = {
|
|
'content_type': 'mako',
|
|
'source': 'sudoer',
|
|
'context': {
|
|
'user': user,
|
|
'commands': commands,
|
|
},
|
|
'mode': '0440',
|
|
}
|