OpenStack-Ansible

  1. Bug #1702182
  2. Comment #1

Comment 1 for bug 1702182

Revision history for this message
Jean-Philippe Evrard (jean-philippe-evrard) wrote :

We should probably replace
https://github.com/openstack/ansible-hardening/blob/f422da8599c6d8f64ebfefbf0a0aa711ea1f9569/tasks/rhel7stig/auth.yml#L104

by

shell: egrep -ir ^nopasswd /etc/sudoers /etc/sudoers.d/ || echo 'not found'

or something like that?