Use full path in config validation consistently
This commit is contained in:
@@ -15,7 +15,7 @@
|
||||
path: /etc/ssh/sshd_config
|
||||
regexp: '^HostKey /etc/ssh/ssh_host_ed25519_key'
|
||||
line: 'HostKey /etc/ssh/ssh_host_ed25519_key'
|
||||
validate: sshd -f %s -t
|
||||
validate: /usr/sbin/sshd -t -f %s
|
||||
|
||||
- name: "Algorithms | enable the RSA authentication algorithm"
|
||||
notify: "Restart ssh"
|
||||
@@ -23,7 +23,7 @@
|
||||
path: /etc/ssh/sshd_config
|
||||
regexp: '^HostKey /etc/ssh/ssh_host_rsa_key'
|
||||
line: 'HostKey /etc/ssh/ssh_host_rsa_key'
|
||||
validate: sshd -f %s -t
|
||||
validate: /usr/sbin/sshd -t -f %s
|
||||
|
||||
- name: "Algorithms | disable the ECDSA algorithm (deemed to be less safe)"
|
||||
notify: "Restart ssh"
|
||||
@@ -31,7 +31,7 @@
|
||||
path: /etc/ssh/sshd_config
|
||||
regexp: '^HostKey /etc/ssh/ssh_host_ecdsa_key'
|
||||
state: absent
|
||||
validate: sshd -f %s -t
|
||||
validate: /usr/sbin/sshd -t -f %s
|
||||
|
||||
- name: "Algorithms | disable the DSA algorithm (considered to be defunct)"
|
||||
notify: "Restart ssh"
|
||||
@@ -39,4 +39,4 @@
|
||||
path: /etc/ssh/sshd_config
|
||||
regexp: '^HostKey /etc/ssh/ssh_host_dsa_key'
|
||||
state: absent
|
||||
validate: sshd -f %s -t
|
||||
validate: /usr/sbin/sshd -t -f %s
|
||||
|
||||
@@ -23,4 +23,4 @@
|
||||
path: /etc/ssh/sshd_config
|
||||
regexp: '^#?LogLevel'
|
||||
line: 'LogLevel VERBOSE'
|
||||
validate: sshd -f %s -t
|
||||
validate: /usr/sbin/sshd -t -f %s
|
||||
|
||||
@@ -36,7 +36,7 @@
|
||||
path: /etc/ssh/sshd_config
|
||||
regexp: '^#?UsePAM'
|
||||
line: "UsePAM {{ sshd_disable_pam | ternary('no', 'yes') }}"
|
||||
validate: sshd -f %s -t
|
||||
validate: /usr/sbin/sshd -t -f %s
|
||||
|
||||
- name: "Restrictions | ensure the SSHD config is restricted to the root user"
|
||||
notify: "Restart ssh"
|
||||
|
||||
@@ -6,7 +6,7 @@
|
||||
path: /etc/ssh/sshd_config
|
||||
regexp: '^#?\s*AllowUsers\s+'
|
||||
line: "AllowUsers {{ sshd_allow_users }}"
|
||||
validate: sshd -f %s -t
|
||||
validate: /usr/sbin/sshd -t -f %s
|
||||
|
||||
- name: "Configure AllowGroups"
|
||||
when: sshd_allow_groups is defined
|
||||
@@ -15,4 +15,4 @@
|
||||
path: /etc/ssh/sshd_config
|
||||
regexp: '^#?\s*AllowGroups\s+'
|
||||
line: "AllowGroups {{ sshd_allow_groups }}"
|
||||
validate: sshd -f %s -t
|
||||
validate: /usr/sbin/sshd -t -f %s
|
||||
|
||||
Reference in New Issue
Block a user