From 71bcb7c3510d3e9b79df015b38918212b24c767d Mon Sep 17 00:00:00 2001
From: Hyperling <me@hyperling.com>
Date: Sat, 24 Oct 2026 15:16:37 -0700
Subject: [PATCH] users, ensure home and its immediate subdirectories are owned
 by the user.

---
 tasks/general/acct_mgmt/users.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/tasks/general/acct_mgmt/users.yml b/tasks/general/acct_mgmt/users.yml
index a07fe99..5f6304a 100644
--- a/tasks/general/acct_mgmt/users.yml
+++ b/tasks/general/acct_mgmt/users.yml
@@ -124,9 +124,14 @@
   when: user_user.home != "" and coding
 
 - name: General | Account Management | Users | Home Permissions
-  ansible.builtin.shell: "chmod 700 {{ user_user.home }}/../*"
+  ansible.builtin.shell: "{{ item }}"
   register: shell_check
   changed_when: shell_check.rc == 0
+  loop:
+    - "chmod 700 {{ user_user.home }}/../*"
+    - "chown {{ user }}:{{ user }} {{ user_user.home }}"
+    - "chown {{ user }}:{{ user }} {{ user_user.home }}/*"
+    - "chown {{ user }}:{{ user }} {{ user_user.home }}/.*"
 
 
 ## Files ##
@@ -1402,6 +1407,7 @@
   ansible.builtin.file:
     path: "{{ user_user.home }}/{{ item }}"
     owner: "{{ user }}"
+    group: "{{ user }}"
     mode: '0755'
   loop:
     - .bashrc