Add mode to su-binary task. Fix #38

dev-sec · Aug 13, 2015 · a1a439d · a1a439d
1 parent 914edb2
commit a1a439d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/roles/ansible-os-hardening/tasks/minimize_access.yml b/roles/ansible-os-hardening/tasks/minimize_access.yml
@@ -14,5 +14,5 @@
   file: dest='/etc/shadow' owner=root group=root mode=0600
 
 - name: change su-binary to only be accessible to user and group root
-  file: dest='/bin/su' owner=root group=root mode
+  file: dest='/bin/su' owner=root group=root mode=0750
   when: security_users_allow|default(None) != None