Amir Alexander Abdelbaki
6ad8d0d488
Adds a new host group policy `no_local_users` that locks the passwords of root and all local users (UID >= 1000) via `passwd -l`, ensuring only FreeIPA domain accounts with centrally-managed sudo rules can authenticate and gain elevated privileges. Leaving the group reverts by unlocking every account tracked in the state file. Updates docs with group reference entry and Local User Lockdown section. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| archiso.md | ||
| editors.md | ||
| freeipa-ansible.md | ||
| hyprland.md | ||
| index.md | ||
| installation.md | ||
| modules.md | ||
| theming.md | ||
| utilities.md | ||