-
Notifications
You must be signed in to change notification settings - Fork 741
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
"irc" user always changed after reboot #53
Comments
By default we do not change a 'irc' user. Can you provide your playbook and the setting for The user-task removes the login shell and sets the password to '*'. You could check what changed after a reboot. |
I don't see any changes in /etc/passwd and in /etc/shadow in group_vars/all/all.yml I have |
User |
Hey, @fitz123, if you still have an issue, I'll reopen this! |
after every reboot task change system accounts not on the user provided ignore-list for irc user is changed. p.s. it doesn't change "the password from x to *" |
Okay, I can reproduce this.
If you run the ansible-playbook on the host like this:
it keeps the temporary created files. Now when I diff the python script that changes the user
Long story short: I don't know what's going on. I'll investigate further. |
Everything right, except I doesn't install 'irssi'. User 'irc' exists by default in the 'ubuntu-14.04.3-server' official distributive, at least it existed few months ago when I downloaded it last time |
Problem does not appear on Centos 6.5. I'm going to ask on the mailinglist. |
@fitz123, I guess that's not really an issue with the hardening role. Do you still want to keep this issue open? |
I'm not sure does it really affect something? It's possibly that irc user is actually changed in some way during startup and it's possibly that this task changes it back, breaking service functionality. |
Sorry for not answering, @fitz123, I missed that post! |
Ok, 2 options then. It works for me |
update readme to new layout for vars
Task: change system accounts not on the user provided ignore-list
always changes something for "irc" user after refoor
with
apt: update_cache=yes upgrade=dist
Cannot find what's the reason/
The text was updated successfully, but these errors were encountered: