rc/classroom
5
0
Fork 4
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix sddm, apparmor

Browse source
This commit is contained in:
Gašper Fele-Žorž 2025-10-26 22:42:08 +01:00
parent 8b96036196
commit 24c5b6b2f4
3 changed files with 9 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

1
roles/ad_joined/templates/apparmor_cifs_homes Normal file
View file

@ -0,0 +1 @@
@{HOMEDIRS}+=/home/profiles/

4
roles/ad_joined/templates/sssd.conf
View file

@ -30,8 +30,8 @@ ldap_id_mapping = True
use_fully_qualified_names = True use_fully_qualified_names = True
full_name_format = %1$s@%3$s full_name_format = %1$s@%3$s
# fallback_homedir = /home/%u@%d # fallback_homedir = /home/%u@%d
fallback_homedir = /cifs_home/%u.%F fallback_homedir = /home/profiles/%u.%F
subdomain_homedir = /cifs_home/%u.%F subdomain_homedir = /home/profiles/%u.%F
access_provider = ad access_provider = ad
krb5_ccname_template = FILE:%d/krb5cc_%U krb5_ccname_template = FILE:%d/krb5cc_%U
krb5_lifetime = 86400 krb5_lifetime = 86400

6
roles/fri_base/tasks/main_lin.yml
View file

@ -265,6 +265,12 @@
dest: /etc/sddm.conf.d/ dest: /etc/sddm.conf.d/
src: hide_users.conf src: hide_users.conf
- name: Prevent sddm from enumerating all users
lineinfile:
path: /usr/share/sddm/themes/breeze/metadata.desktop
insertafter: EOF
state: present
line: needsFullUserModel=false
- name: Copy authorized_keys - name: Copy authorized_keys
become: false become: false