openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/source/developer-notes/V-38500.rst
Major Hayden e33d274a71 V-38500: No UID 0 accounts except root 
This task will check for accounts with UID that aren't root. No action is
taken on these accounts, but the playbook will fail with an error message.

Change-Id: I2cd2a24c64e4139ce21fbe30107346e30b280e62
2015-10-14 13:43:28 +00:00

379 B
Raw Blame History

The Ansible tasks will search for accounts in /etc/passwd that have UID 0 that aren't the normal root account. If any matching accounts are found, a warning is printed to stdout and the Ansible play will fail.

No action is taken on those accounts as that action may disrupt a production environment. Deployers are strongly urged to use sudo for these types of actions.