Jon Ellis 97c72f88b7 Sudoers validate (#4794) ... * Use visudo to validate sudoers rules before use * Replace use of subprocess.Popen with module.run_command * Switch out apt for package * Check file mode when verifying file to determine whether something needs to change * Only install sudo package for debian and redhat environments (when testing) * Attempt to install sudo on FreeBSD too * Try just installing sudo for non-darwin machines * Don't validate file ownership * Attempt to install sudo on all platforms * Revert "Attempt to install sudo on all platforms" This reverts commit b9562a8916. * Remove file permissions changes from this PR * Add changelog fragment for 4794 sudoers validation * Add option to control when sudoers validation is used * Update changelog fragment Co-authored-by: Felix Fontein <felix@fontein.de> * Add version_added to validation property Co-authored-by: Felix Fontein <felix@fontein.de> * Also validate failed sudoers validation error message Co-authored-by: Felix Fontein <felix@fontein.de> * Make visudo not executable instead of trying to delete it * Update edge case validation * Write invalid sudoers file to alternative path to avoid breaking sudo * Don't try to remove or otherwise modify visudo on Darwin * Update plugins/modules/system/sudoers.py Co-authored-by: Felix Fontein <felix@fontein.de> * Remove trailing extra empty line to appease sanity checker Co-authored-by: Felix Fontein <felix@fontein.de>		2022-06-21 12:41:24 +02:00
..
.keep
4520-xfconf-deprecate-disable-facts.yml
4654-alternatives-add-subcommands.yml	Add subcommands parameter for module alternatives. (#4654)	2022-06-06 10:33:39 +02:00
4674-use-mh-raise.yaml
4682-compatibility-virtualmedia-resource-location.yaml
4700-code-changes.yml
4712-consul-bugfix.yaml
4719-fix-keycloak-realm.yaml
4724-proxmox-qemu-extend.yaml
4726-zfs.yml
4733-redis-fail.yml
4736-cmd-runner-skip-if-check.yml
4740-puppet-feature.yaml	Add puppet confdir option (#4740)	2022-06-06 10:32:20 +02:00
4746-add-vpn-support-nmcli.yaml	add support to create L2TP and PPTP VPN connection (#4746)	2022-06-06 21:16:27 +02:00
4752-ansible-galaxy-install-mh-updates.yml
4755-mhexception-improvement.yml	ModuleHelperException module utils - improved exception initialization (#4755)	2022-06-06 10:30:55 +02:00
4776-xfconf-cmd-runner.yaml	xfconf module utils: providing a cmd_runner object (#4776)	2022-06-06 10:38:46 +02:00
4777-cmd-runner-deprecate-fmt.yaml	cmd_runner: deprecate fmt as the name for the format class (#4777)	2022-06-05 18:37:59 +02:00
4780-passwordstore-wrapper-compat.yml	passwordstore: Make compatible with shims (#4780)	2022-06-15 08:08:04 +02:00
4791-cmd-runner-callable.yaml	cmd_runner: add __call__ method to invoke context (#4791)	2022-06-15 08:06:26 +02:00
4794-sudoers-validation.yml	Sudoers validate (#4794)	2022-06-21 12:41:24 +02:00
4809-redhat_subscription-unsubscribe.yaml	redhat_subscription: call 'remove' instead of 'unsubscribe' (#4809)	2022-06-14 07:26:38 +02:00
4810-alternatives-bug.yml	alternatives: Fix bug with priority default (#4810)	2022-06-13 21:40:02 +02:00
4813-fix-nmcli-convert-list.yaml	nmcli: do not convert undefined lists to empty strings (#4813)	2022-06-13 11:56:10 +02:00
4814-sudoers-file-permissions.yml	Ensure managed sudoers config files have 0440 permissions (#4814)	2022-06-12 08:17:56 +02:00
4816-proxmox-fix-extended-status.yaml	Added conditional to only collect qmpstatus on qemu VMs (#4816)	2022-06-11 13:46:17 +02:00
4836-alternatives.yml	Fix alternatives module (#4836)	2022-06-14 16:02:31 +02:00
4839-fix-VirtualMediaInsert-Supermicro.yml	redfish_command: VirtualMediaInsert does not work with Supermicro (#4839)	2022-06-20 19:13:31 +02:00
4852-sudoers-state-absent.yml	sudoers: fix handling of state: absent (#4852) (#4853)	2022-06-19 15:34:24 +02:00
psf-license.yml	Add PSF-license.txt for plugins/module_utils/_mount.py (#4847)	2022-06-17 08:21:34 +02:00
simplified-bsd-license.yml