mkhome must happen before creating the mount point. More privacy.

This commit is contained in:
Andreas B. Mundt 2020-12-05 11:07:43 +01:00
parent 9c3d5e5f2e
commit 7828de3347

View file

@ -37,8 +37,8 @@
- name: enable pam_mkhomedir.so - name: enable pam_mkhomedir.so
lineinfile: lineinfile:
dest: /etc/pam.d/common-session dest: /etc/pam.d/common-session
line: "session optional pam_mkhomedir.so" line: "session optional pam_mkhomedir.so umask=0027"
insertafter: "# end of pam-auth-update config" insertbefore: "session optional pam_mount.so"
- name: configure pam_mount - name: configure pam_mount
blockinfile: blockinfile: