evolix/EvoBSD
21
0
Fork 0
Code Issues 2 Pull requests Releases 3 Wiki Activity

Replace sudo with doas

Browse source
This commit is contained in:
Jérémy Dubois 2019-07-15 17:29:36 +02:00
parent 0f1b209370
commit 1b5196d6a4
3 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
roles/base/tasks/sudo.yml
View file

@ -21,7 +21,6 @@
_nrpe ALL=(root) NOPASSWD: /usr/local/libexec/nagios/plugins/check_ipsecctl.sh
_nrpe ALL=(root) NOPASSWD: /usr/local/libexec/nagios/check_mailq
_nrpe ALL=(root) NOPASSWD: /usr/local/libexec/nagios/plugins/check_ospfd_simple
_nrpe ALL=(root) NOPASSWD: /usr/local/libexec/nagios/check_dhcp
validate: 'visudo -cf %s'
backup: no
tags:

1
roles/base/templates/doas.conf.j2
View file

@ -9,3 +9,4 @@ permit nopass _collectd as root cmd /usr/sbin/bgpctl
permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_ospfd
permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_ospf6d
permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_pf_states
permit nopass _nrpe as root cmd /usr/local/libexec/nagios/check_dhcp

2
roles/nagios-nrpe/templates/evolix_bsd.cfg.j2
View file

@ -30,7 +30,7 @@ command[check_openvpn]=/usr/local/libexec/nagios/plugins/check_openvpn
command[check_pf_states]=doas /usr/local/libexec/nagios/plugins/check_pf_states
command[check_carp1]=/usr/local/libexec/nagios/plugins/check_carp_if carp0 master
command[check_mem]=/usr/local/libexec/nagios/plugins/check_free_mem.sh -w 20 -c 10
command[check_dhcpd]=sudo /usr/local/libexec/nagios/check_dhcp -i INTERFACE -s IP -u
command[check_dhcpd]=doas /usr/local/libexec/nagios/check_dhcp -i INTERFACE -s IP -u
command[check_smb]=/usr/local/libexec/nagios/check_tcp -H IPLOCALE -p 445
#command[check_ospfd]=doas /usr/local/libexec/nagios/plugins/check_ospfd
#command[check_ospf6d]=doas /usr/local/libexec/nagios/plugins/check_ospf6d