Fix pam_env config for debian

Debian requires a different fix for pam_env config than centos-9,
and this was broken in [1]. Return the original task to adjust pam
config on debian.

[1] Ibe4ab810ba48c9735af187d39fc34a7451c12d8a

Change-Id: Ib287ac4805aac8be8b71537e9c52f0c7e57fb8d4
This commit is contained in:
Jonathan Rosser 2022-05-26 12:09:04 +01:00
parent f2ac55d454
commit c0d1978ee9
1 changed files with 8 additions and 0 deletions

View File

@ -52,6 +52,14 @@
tags:
- openstack_hosts-config
- name: Ensure environement is applied during sudo
lineinfile:
path: /etc/pam.d/sudo
line: "session required pam_env.so readenv=1 user_readenv=0"
regexp: 'session\s+required\s+pam_env\.so'
insertbefore: '^@include'
when: ansible_facts['distribution'] | lower == 'debian'
# NOTE(jrosser) Remove this task when https://access.redhat.com/errata/RHBA-2022:4082
# has a fix merged to Centos-9 as well as RHEL.
- name: Ensure environement is applied during su