You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@couchdb.apache.org by da...@apache.org on 2020/12/14 21:12:25 UTC

[couchdb-infra-cm] branch main updated: Ensure root account is locked

This is an automated email from the ASF dual-hosted git repository.

davisp pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/couchdb-infra-cm.git


The following commit(s) were added to refs/heads/main by this push:
     new 24bea20  Ensure root account is locked
24bea20 is described below

commit 24bea20e9a098cf4a462a4b5d9dbabbea84f2ec6
Author: Paul J. Davis <pa...@gmail.com>
AuthorDate: Mon Dec 14 15:11:50 2020 -0600

    Ensure root account is locked
    
    Its locked by default but we might as well add the extra protection just
    in case.
---
 roles/common/tasks/main.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
index 814e1e8..6333339 100644
--- a/roles/common/tasks/main.yml
+++ b/roles/common/tasks/main.yml
@@ -9,6 +9,11 @@
     - https://github.com/nickva.keys
     - https://github.com/wohali.keys
 
+- name: Lock root account
+  user:
+    name: root
+    password_lock: true
+
 - name: Disable password authentication
   lineinfile:
     dest: /etc/ssh/sshd_config