From f376d1f83144dad9e09f8a9ea8793d41bf84e790 Mon Sep 17 00:00:00 2001
From: Raphael Dannecker <raphael.dannecker@steinbeisschule-reutlingen.de>
Date: Wed, 17 Jun 2026 10:55:52 +0200
Subject: [PATCH] Force password for sudo usage

---
 roles/lmn_security/tasks/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/lmn_security/tasks/main.yml b/roles/lmn_security/tasks/main.yml
index 6c9edcf..6943312 100644
--- a/roles/lmn_security/tasks/main.yml
+++ b/roles/lmn_security/tasks/main.yml
@@ -45,7 +45,7 @@
     mode: '0700'
     content: |
       {% for user, programs in sudo_permissions.items() %}
-      {{ user }} ALL=(root) NOPASSWD: {% for program in programs %}{{ program }}{% if not loop.last %}, {% endif %}{% endfor %}
+      {{ user }} ALL=(root) {% for program in programs %}{{ program }}{% if not loop.last %}, {% endif %}{% endfor %}
       {% endfor %}
   when: sudo_permissions is defined