Remove role lmn_teacherlaptop and extend role lmn_security
- Add variable to configure sudo-program permissions (`sudo_permissions`) - Add variable to configure polkit-rules (`polkit_rules`) - Migrate sudo and polkit permissions from lmn_teacherlaptop role to inventory
This commit is contained in:
parent
c00d5566dd
commit
c4e35584bc
8 changed files with 506 additions and 485 deletions
12
roles/lmn_security/templates/polkit_rules.j2
Normal file
12
roles/lmn_security/templates/polkit_rules.j2
Normal file
|
@ -0,0 +1,12 @@
|
|||
// /etc/polkit-1/rules.d/lmn-security.rules
|
||||
|
||||
polkit.addRule(function(action, subject) {
|
||||
{% for group, privlist in polkit_rules.items() %}
|
||||
if (subject.isInGroup("{{ group }}")){
|
||||
{% for priv in privlist %}
|
||||
if (action.id == "{{ priv }}") { return polkit.Result.YES; }
|
||||
{% endfor %}
|
||||
}
|
||||
{% endfor %}
|
||||
});
|
||||
|
Loading…
Add table
Add a link
Reference in a new issue