Some settings in the provided templates for /etc/sudoers are insufficient to meet our security guidelines.
Would be nice to allow passing default values via class parameters.
Our current workaround is to replace $sudo::content with just the #includedir part and then put all our default settings in hiera in sudo::configs with a priority of 0.
Some settings in the provided templates for
/etc/sudoers
are insufficient to meet our security guidelines.Would be nice to allow passing default values via class parameters.
Our current workaround is to replace
$sudo::content
with just the#includedir
part and then put all our default settings in hiera insudo::configs
with a priority of 0.