search

robertdebock / ansible-role-users

The purpose of this role is to add users and groups on your system.
https://robertdebock.nl/
Apache License 2.0
43 stars 27 forks source link

Allow disabling deployment of /etc/cron.allow #5

Closed jkirk closed 5 years ago

jkirk commented 5 years ago

Describe the bug When deploying users with this role (without setting cron_allow: true), an empty file /etc/cron.allow is created (except the ansible_managed header).

Quoting crontab(8):

If the /etc/cron.allow file exists, then you must be listed (one user per line) therein in order to be allowed to use this command.

This means that after using this role, no (other) user is allowed to run cron.

Expected behavior It should be possible to disable the deployment of /etc/cron.allow. Maybe setting a variable like users_cron_allow: false could do the trick. The default could be true, but I am also fine with false.

Environment