From e12490913d1691af3fe559bf1978dc992e1bf465 Mon Sep 17 00:00:00 2001 From: Jaime Melis Date: Mon, 2 Nov 2015 15:47:42 +0100 Subject: [PATCH] Feature #3987: update sudoers --- share/pkgs/CentOS/opennebula.sudoers | 3 ++- share/pkgs/Debian7/opennebula.sudoers | 3 ++- share/pkgs/Debian8/opennebula.sudoers | 3 ++- share/pkgs/Ubuntu/opennebula.sudoers | 3 ++- share/sudoers/sudo_commands.rb | 6 ++++-- 5 files changed, 12 insertions(+), 6 deletions(-) diff --git a/share/pkgs/CentOS/opennebula.sudoers b/share/pkgs/CentOS/opennebula.sudoers index 8d0ba48304..1f2400f36a 100644 --- a/share/pkgs/CentOS/opennebula.sudoers +++ b/share/pkgs/CentOS/opennebula.sudoers @@ -7,5 +7,6 @@ Cmnd_Alias ONE_LVM = /sbin/lvcreate, /sbin/lvremove, /sbin/lvrename, /sbin/lvs, Cmnd_Alias ONE_ISCSI = /sbin/iscsiadm, /usr/sbin/tgt-admin, /usr/sbin/tgtadm Cmnd_Alias ONE_OVS = /usr/bin/ovs-ofctl, /usr/bin/ovs-vsctl Cmnd_Alias ONE_XEN = /usr/sbin/xentop, /usr/sbin/xl, /usr/sbin/xm +Cmnd_Alias ONE_CEPH = /usr/bin/rbd -oneadmin ALL=(ALL) NOPASSWD: ONE_MISC, ONE_NET, ONE_LVM, ONE_ISCSI, ONE_OVS, ONE_XEN +oneadmin ALL=(ALL) NOPASSWD: ONE_MISC, ONE_NET, ONE_LVM, ONE_ISCSI, ONE_OVS, ONE_XEN, ONE_CEPH diff --git a/share/pkgs/Debian7/opennebula.sudoers b/share/pkgs/Debian7/opennebula.sudoers index 4f75c3eec7..7d8981db3a 100644 --- a/share/pkgs/Debian7/opennebula.sudoers +++ b/share/pkgs/Debian7/opennebula.sudoers @@ -7,5 +7,6 @@ Cmnd_Alias ONE_LVM = /sbin/lvcreate, /sbin/lvremove, /sbin/lvrename, /sbin/lvs, Cmnd_Alias ONE_ISCSI = /usr/bin/iscsiadm, /usr/sbin/tgt-admin, /usr/sbin/tgtadm Cmnd_Alias ONE_OVS = /usr/bin/ovs-ofctl, /usr/bin/ovs-vsctl Cmnd_Alias ONE_XEN = /usr/sbin/xentop, /usr/sbin/xl, /usr/sbin/xm +Cmnd_Alias ONE_CEPH = /usr/bin/rbd -oneadmin ALL=(ALL) NOPASSWD: ONE_MISC, ONE_NET, ONE_LVM, ONE_ISCSI, ONE_OVS, ONE_XEN +oneadmin ALL=(ALL) NOPASSWD: ONE_MISC, ONE_NET, ONE_LVM, ONE_ISCSI, ONE_OVS, ONE_XEN, ONE_CEPH diff --git a/share/pkgs/Debian8/opennebula.sudoers b/share/pkgs/Debian8/opennebula.sudoers index e3fefb1138..d07f56977a 100644 --- a/share/pkgs/Debian8/opennebula.sudoers +++ b/share/pkgs/Debian8/opennebula.sudoers @@ -7,5 +7,6 @@ Cmnd_Alias ONE_LVM = /sbin/lvcreate, /sbin/lvremove, /sbin/lvrename, /sbin/lvs, Cmnd_Alias ONE_ISCSI = /usr/bin/iscsiadm, /usr/sbin/tgt-admin, /usr/sbin/tgtadm Cmnd_Alias ONE_OVS = /usr/bin/ovs-ofctl, /usr/bin/ovs-vsctl Cmnd_Alias ONE_XEN = /usr/sbin/xentop, /usr/sbin/xl, /usr/sbin/xm +Cmnd_Alias ONE_CEPH = /usr/bin/rbd -oneadmin ALL=(ALL) NOPASSWD: ONE_MISC, ONE_NET, ONE_LVM, ONE_ISCSI, ONE_OVS, ONE_XEN +oneadmin ALL=(ALL) NOPASSWD: ONE_MISC, ONE_NET, ONE_LVM, ONE_ISCSI, ONE_OVS, ONE_XEN, ONE_CEPH diff --git a/share/pkgs/Ubuntu/opennebula.sudoers b/share/pkgs/Ubuntu/opennebula.sudoers index e3fefb1138..d07f56977a 100644 --- a/share/pkgs/Ubuntu/opennebula.sudoers +++ b/share/pkgs/Ubuntu/opennebula.sudoers @@ -7,5 +7,6 @@ Cmnd_Alias ONE_LVM = /sbin/lvcreate, /sbin/lvremove, /sbin/lvrename, /sbin/lvs, Cmnd_Alias ONE_ISCSI = /usr/bin/iscsiadm, /usr/sbin/tgt-admin, /usr/sbin/tgtadm Cmnd_Alias ONE_OVS = /usr/bin/ovs-ofctl, /usr/bin/ovs-vsctl Cmnd_Alias ONE_XEN = /usr/sbin/xentop, /usr/sbin/xl, /usr/sbin/xm +Cmnd_Alias ONE_CEPH = /usr/bin/rbd -oneadmin ALL=(ALL) NOPASSWD: ONE_MISC, ONE_NET, ONE_LVM, ONE_ISCSI, ONE_OVS, ONE_XEN +oneadmin ALL=(ALL) NOPASSWD: ONE_MISC, ONE_NET, ONE_LVM, ONE_ISCSI, ONE_OVS, ONE_XEN, ONE_CEPH diff --git a/share/sudoers/sudo_commands.rb b/share/sudoers/sudo_commands.rb index 49e6137118..1dafdef833 100644 --- a/share/sudoers/sudo_commands.rb +++ b/share/sudoers/sudo_commands.rb @@ -18,7 +18,6 @@ require "erb" -KEYS = [:MISC , :NET , :LVM , :ISCSI , :OVS , :XEN] CMDS = { :MISC => %w(dd mkfs sync), @@ -26,9 +25,12 @@ CMDS = { :LVM => %w(lvcreate lvremove lvrename lvs vgdisplay), :ISCSI => %w(iscsiadm tgt-admin tgtadm), :OVS => %w(ovs-ofctl ovs-vsctl), - :XEN => %w(xentop xl xm) + :XEN => %w(xentop xl xm), + :CEPH => %w(rbd) } +KEYS = CMDS.keys + abs_cmds = {} not_found_cmds = []