Files
sukaato-ansible/.ansible/roles/bootstrap/tasks/denyroot@ssh.yml

10 lines
278 B
YAML

---
- name: Disable remote login for root
copy:
src: sshd/denyroot.conf
dest: /etc/ssh/sshd_config.d/denyroot.conf
owner: "{{ primary_root_acct }}"
group: "{{ primary_root_acct }}"
force: yes
register: sshroot_disabled
tags: ['default', 'deny_sshroot']