Обновить roles/base_setup/tasks/main.yml

2026-05-13 10:00:43 +05:00 · 2026-05-13 10:00:43 +05:00 · 3bffa17b70
commit 3bffa17b70
parent 712d1af6dd
1 changed files with 407 additions and 399 deletions
--- a/roles/base_setup/tasks/main.yml
+++ b/roles/base_setup/tasks/main.yml
@ -208,6 +208,14 @@
  tags: [deploy_base, users]

 # ========== SSH Security Hardening ==========
+- name: Ensure privilege separation directory exists for sshd validation
+  file:
+    path: /run/sshd
+    state: directory
+    mode: '0755'
+  become: yes
+  tags: [deploy_base, ssh]
+
 - name: Configure SSH security
  lineinfile:
    path: /etc/ssh/sshd_config