mkhome must happen before creating the mount point. More privacy.
This commit is contained in:
		
							parent
							
								
									9c3d5e5f2e
								
							
						
					
					
						commit
						7828de3347
					
				
					 1 changed files with 2 additions and 2 deletions
				
			
		| 
						 | 
					@ -37,8 +37,8 @@
 | 
				
			||||||
- name: enable pam_mkhomedir.so
 | 
					- name: enable pam_mkhomedir.so
 | 
				
			||||||
  lineinfile:
 | 
					  lineinfile:
 | 
				
			||||||
    dest: /etc/pam.d/common-session
 | 
					    dest: /etc/pam.d/common-session
 | 
				
			||||||
    line: "session	optional			pam_mkhomedir.so"
 | 
					    line: "session	optional	pam_mkhomedir.so  umask=0027"
 | 
				
			||||||
    insertafter: "# end of pam-auth-update config"
 | 
					    insertbefore: "session	optional	pam_mount.so"
 | 
				
			||||||
 | 
					
 | 
				
			||||||
- name: configure pam_mount
 | 
					- name: configure pam_mount
 | 
				
			||||||
  blockinfile:
 | 
					  blockinfile:
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
	Add table
		
		Reference in a new issue