mkhome must happen before creating the mount point. More privacy.

This commit is contained in:
Andreas B. Mundt 2020-12-05 11:07:43 +01:00
parent 9c3d5e5f2e
commit 7828de3347

View file

@ -37,8 +37,8 @@
- name: enable pam_mkhomedir.so
lineinfile:
dest: /etc/pam.d/common-session
line: "session optional pam_mkhomedir.so"
insertafter: "# end of pam-auth-update config"
line: "session optional pam_mkhomedir.so umask=0027"
insertbefore: "session optional pam_mount.so"
- name: configure pam_mount
blockinfile: