From 27006f8db703e2128e41c7c521e60c20187764d3 Mon Sep 17 00:00:00 2001 From: Jeremy Dubois Date: Tue, 21 Apr 2020 16:18:07 +0200 Subject: [PATCH] Doas permissions rearrangement --- roles/base/templates/doas.conf.j2 | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/roles/base/templates/doas.conf.j2 b/roles/base/templates/doas.conf.j2 index 66558bf..796da79 100644 --- a/roles/base/templates/doas.conf.j2 +++ b/roles/base/templates/doas.conf.j2 @@ -2,15 +2,14 @@ permit setenv {SSH_AUTH_SOCK SSH_TTY PKG_PATH HOME=/root ENV=/root/.profile} :{{ evolinux_sudo_group }} permit nopass root permit setenv {ENV PS1 SSH_AUTH_SOCK SSH_TTY} nopass :{{ evolinux_sudo_group }} as root cmd /usr/share/scripts/evomaintenance.sh -permit nopass _nrpe cmd /usr/local/libexec/nagios/check_ipsecctl.sh -permit nopass _nrpe as root cmd /sbin/bioctl args sd2 permit nopass _collectd as root cmd /usr/sbin/bgpctl +permit nopass _nrpe as root cmd /sbin/bioctl args sd2 permit nopass _nrpe as root cmd /usr/local/libexec/nagios/check_mailq +permit nopass _nrpe as root cmd /usr/local/libexec/nagios/check_dhcp permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_ipsecctl.sh permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_ospfd_simple permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_ospfd permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_ospf6d permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_openbgpd permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_pf_states -permit nopass _nrpe as root cmd /usr/local/libexec/nagios/check_dhcp permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_connections_state.sh