You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Dec 26, 2020. It is now read-only.
Copy file name to clipboardExpand all lines: tasks/main.yml
+2-2Lines changed: 2 additions & 2 deletions
Original file line number
Diff line number
Diff line change
@@ -72,7 +72,7 @@
72
72
when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'
73
73
74
74
- name: check if ssh_password module is already installed
75
-
shell: "semodule -l| grep ssh_password"
75
+
shell: "semodule -l| grep ssh_password"
76
76
register: ssh_password_module
77
77
failed_when: false
78
78
changed_when: false
@@ -100,7 +100,7 @@
100
100
101
101
# The following tasks only get executed when selinux is in state enforcing, UsePam is "yes" and the ssh_password module is installed.
102
102
- name: remove selinux-policy when Pam is used, because Allowing sshd to read the shadow file directly is considered a potential security risk (http://danwalsh.livejournal.com/12333.html)
103
-
shell: semodule -r ssh_password
103
+
command: semodule -r ssh_password
104
104
when: ssh_use_pam and ssh_password_module.stdout.find('ssh_password') == 0
0 commit comments