evolinux-users: Update sudoers template to remove commands allowed without password
gitea/ansible-roles/pipeline/head This commit looks good Details

This commit is contained in:
Ludovic Poujol 2023-02-01 15:23:51 +01:00
parent 3f0eecc056
commit 49e92d20b0
3 changed files with 3 additions and 2 deletions

View File

@ -25,6 +25,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
* nagios-nrpe : Rewrite check_vrrpd for a better check (check rp_filter, vrrpd and uvrrpd compatible, use arguments, …) * nagios-nrpe : Rewrite check_vrrpd for a better check (check rp_filter, vrrpd and uvrrpd compatible, use arguments, …)
* postfix: come back to default value of `notify_classes` for pack mails. * postfix: come back to default value of `notify_classes` for pack mails.
* openvpn: Change check_openvpn destination file to comply with recent EvoBSD change * openvpn: Change check_openvpn destination file to comply with recent EvoBSD change
* evolinux-users: Update sudoers template to remove commands allowed without password
### Fixed ### Fixed

View File

@ -1,6 +1,6 @@
Defaults umask=0077 Defaults umask=0077
Cmnd_Alias MAINT = /usr/share/scripts/evomaintenance.sh, /usr/share/scripts/listupgrade.sh, /usr/bin/apt, /bin/mount Cmnd_Alias MAINT = /usr/share/scripts/evomaintenance.sh, /usr/share/scripts/listupgrade.sh
User_Alias ADMINS = {{ user.name }} User_Alias ADMINS = {{ user.name }}
nagios ALL = NOPASSWD: /usr/lib/nagios/plugins/check_procs nagios ALL = NOPASSWD: /usr/lib/nagios/plugins/check_procs

View File

@ -1,6 +1,6 @@
Defaults umask=0077 Defaults umask=0077
Cmnd_Alias MAINT = /usr/share/scripts/evomaintenance.sh, /usr/share/scripts/listupgrade.sh, /usr/bin/apt, /bin/mount Cmnd_Alias MAINT = /usr/share/scripts/evomaintenance.sh, /usr/share/scripts/listupgrade.sh
nagios ALL = NOPASSWD: /usr/lib/nagios/plugins/check_procs nagios ALL = NOPASSWD: /usr/lib/nagios/plugins/check_procs
nagios ALL = NOPASSWD: /usr/local/lib/nagios/plugins/check_minifirewall nagios ALL = NOPASSWD: /usr/local/lib/nagios/plugins/check_minifirewall