diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index a06741f..9b1b4f5 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -1,3 +1,11 @@
 ---
 - name: include os specific tasks
   include_tasks: "{{ ansible_os_family }}.yml"
+
+- name: disable at from all users
+  copy:
+    content: "\n"
+    dest: "/etc/at.allow"
+    mode: 0600
+    owner: root
+    group: root