Files
ansible-cis/tasks/sudo.yaml

10 lines
210 B
YAML

---
- name: Ensure sudo access is logged
ansible.builtin.copy:
dest: /etc/sudoers.d/logfile.conf
owner: root
group: root
mode: "0644"
content: |
Defaults logfile="/var/log/sudo.log"