When it comes to user account management, security is important. As we discussed in the section entitled Centralizing user account management with LDAP, Ansible is not designed specifically for enforcement or auditing— however, it can help us greatly. Let's consider a few of the security risks around user management that Ansible can help to mitigate, starting with the sudoers file.
Enforcing and auditing configuration
Managing sudoers with Ansible
The /etc/sudoers file is one of the most sensitive on most Linux systems, as it defines which user accounts can run commands as the superuser. Needless to say, this file being compromised or modified in an unauthorized way could pose a huge security risk to not just the...
