crans
/
ansible
mirror of http://gitlab.adm.crans.org/nounous/ansible.git
19
0
Fork 0
Code Issues Projects Releases Wiki Activity

[sudo] Autorise les cableurs à qm list

certbot_on_virtu
_shirenn 2021-01-17 20:23:09 +01:00
parent 2ce624a666
commit 4987bbaf02
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
roles/sudo/templates/sudoers.j2
View File

@ -7,6 +7,8 @@ Defaults mail_badpass
Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
# Host alias specification # Host alias specification
User_Alias USERS= %user
User_Alias NOUNOUS= %nounou
# User alias specification # User alias specification
@ -15,6 +17,11 @@ Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/b
# User privilege specification # User privilege specification
root ALL=(ALL:ALL) ALL root ALL=(ALL:ALL) ALL
{% if 'virtu' in group_names %}
# Pour vérifier quels vms sont sur quels virtus
USERS ALL=(root:ALL) NOPASSWD:/usr/sbin/qm list
{% endif %}
# See sudoers(5) for more information on "#include" directives: # See sudoers(5) for more information on "#include" directives:
#includedir /etc/sudoers.d #includedir /etc/sudoers.d