Setting os_security_users_allow has no effect

[adaitche]

Setting the variable os_security_users_allow to change_user (or [change_user]) doesn't have any effect. The permissions of /bin/su are always set to 0750.

Here is the code block which uses this variable (from tasks/minimize_access.yml):

- name: change su-binary to only be accessible to user and group root
  file:
    dest: '/bin/su'
    owner: 'root'
    group: 'root'
    mode: '0750'
  when: os_security_users_allow != None

Apparently this task is executed when the variable is set to any value. I think the when-condition should be changed to change_user not in os_security_users_allow. I am happy to submit a pull request, if this is approved.

[rndmh3ro]

I agree, there's something wrong here. I'll have to take a look.

[rndmh3ro]

Should be fixed in master now. Thanks to @szEvEz