From c28e15231fa0b2d6402787281045a68451501c97 Mon Sep 17 00:00:00 2001 From: Patrick Marchand Date: Tue, 28 May 2019 22:57:58 +0200 Subject: [PATCH] Move nagios sudo privileges from evolix-users to nagios-nrpe role The nagios-nrpe role does not depend on the evolix-users role but the sudo privileges the role requires to function are in the evolix-users sudoers template. This commit moves those privileges over to the /etc/sudoers.d/nagios file. This new task is part of the nagios-nrpe role. --- nagios-nrpe/files/nagios_sudoers | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 nagios-nrpe/files/nagios_sudoers diff --git a/nagios-nrpe/files/nagios_sudoers b/nagios-nrpe/files/nagios_sudoers new file mode 100644 index 00000000..1e236145 --- /dev/null +++ b/nagios-nrpe/files/nagios_sudoers @@ -0,0 +1,5 @@ +nagios ALL = NOPASSWD: /usr/lib/nagios/plugins/check_procs +nagios ALL = NOPASSWD: /usr/local/lib/nagios/plugins/check_minifirewall +nagios ALL = NOPASSWD: /usr/local/lib/nagios/plugins/check_haproxy_stats +nagios ALL = NOPASSWD: /usr/sbin/bkctld check +nagios ALL = (clamav) NOPASSWD: /usr/bin/clamscan /tmp/safe.txt \ No newline at end of file