DeSq-Gaming/Ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

aim-web2.1.0rc9

Browse Source
This commit is contained in:
admin_rb
2026-09-22 19:23:17 +02:00
parent d095887d2e
commit 3dfc80b782
438 changed files with 31613 additions and 1510 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/checkmk_windows_acl/README.md
+16
View File
@@ -0,0 +1,16 @@
# checkmk_windows_acl
Normalizes access on AIM-managed persistent Windows Checkmk files without recursively
changing Checkmk directories or unknown/operator files.
The role enables parent ACL inheritance and guarantees locale-independent well-known
principals by SID:
- SYSTEM (`S-1-5-18`): FullControl
- local Administrators (`S-1-5-32-544`): FullControl
- ALL APPLICATION PACKAGES (`S-1-15-2-1`): ReadAndExecute
- ALL RESTRICTED APPLICATION PACKAGES (`S-1-15-2-2`): ReadAndExecute
AIM does not add customer-specific administrator/user ACEs. Existing intentional parent
or explicit ACEs are not blindly purged. Pass persistent AIM-owned file paths through
`checkmk_windows_acl_paths`.