Remove SGID bits from /usr/bin/w{all,rite} (Slackware)

pyllyukko · Apr 7, 2024 · 5864e49 · 5864e49
1 parent c77a667
commit 5864e49
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/tasks/filesystem.yml b/tasks/filesystem.yml
@@ -147,6 +147,15 @@
         mode: u-s
         owner: root
         group: root
+    - name: Remove SGID bits from /usr/bin/w{all,rite}
+      ansible.builtin.file:
+        path: '{{ item }}'
+        mode: g-s
+        owner: root
+        group: root
+      with_items:
+        - /usr/bin/wall
+        - /usr/bin/write
 
 - name: Chmod sensitive files
   become: true