parameters:
  _param:
    sudo_shells:
    - /bin/sh
    - /bin/ksh
    - /bin/bash
    - /bin/rbash
    - /bin/dash
    - /bin/zsh
    - /bin/csh
    - /bin/fish
    - /bin/tcsh
    - /usr/bin/login
    - /usr/bin/su
    - /usr/su
    sudo_restricted_su:
    - /bin/vi* /etc/sudoers*
    - /bin/nano /etc/sudoers*
    - /bin/emacs /etc/sudoers*
    - /bin/su - root
    - /bin/su -
    - /bin/su
    - /usr/sbin/visudo
    - /usr/bin/sudo
    - /bin/bash
    sudo_coreutils_safe:
    - /usr/bin/cat
    - /usr/bin/less
    - /usr/bin/view
    - /usr/bin/more
    - /usr/bin/grep
    - /usr/bin/fgrep
    - /usr/bin/egrep
    - /usr/bin/zgrep
    - /usr/bin/ack
    - /usr/bin/tail
    - /usr/bin/socat
    - /usr/bin/top
    - /usr/bin/atop
    - /usr/bin/tail
    - /usr/bin/lsof
    - /usr/bin/virsh
    - /bin/ls
    - /bin/cp
    - /bin/netstat
    sudo_coreutils_trusted:
    - /usr/bin/vi*
    - /usr/bin/vim*
    - /usr/bin/emacs*
    - /usr/bin/nano*
    sudo_rabbitmq_safe:
    - /usr/sbin/rabbitmqctl
    - /usr/sbin/rabbitmqctl status
    - /usr/sbin/rabbitmqctl cluster_status
    - /usr/sbin/rabbitmqctl list_queues*
    sudo_salt_safe:
    - /usr/bin/salt * state*
    - /usr/bin/salt * service*
    - /usr/bin/salt * pillar*
    - /usr/bin/salt * grains*
    - /usr/bin/salt * saltutil*
    - /usr/bin/salt * test.ping
    - /usr/bin/salt-call state*
    - /usr/bin/salt-call service*
    - /usr/bin/salt-call pillar*
    - /usr/bin/salt-call grains*
    - /usr/bin/salt-call saltutil*
    sudo_salt_trusted:
    - /usr/bin/salt*
    sudo_networking:
    - /sbin/ip
    - /sbin/ss
    - /sbin/ifconfig
    - /sbin/route
    - /sbin/ethtool
    - /sbin/tcpdump
    sudo_contrail_utilities:
    - /usr/bin/contrail*
    - /bin/contrail*
    - /usr/bin/vif
    - /usr/bin/flow
    - /usr/bin/vrfstats
    - /usr/bin/rt
    - /usr/bin/dropstats
    - /usr/bin/mpls
    - /usr/bin/mirror
    - /usr/bin/vxlan
    - /usr/bin/nh
    sudo_storage_utilities:
    - /usr/bin/ceph*
    - /usr/bin/rados*
    - /usr/bin/rbd
    - /usr/sbin/gluster
    - /usr/fdisk -l *
    - /usr/bin/du *
    - /bin/df *
    sudo_openstack_clients:
    - /usr/bin/openstack
    - /usr/bin/heat*
    - /usr/bin/nova*
    - /usr/bin/neutron*
    - /usr/bin/keystone*
    - /usr/bin/glance*
    - /usr/bin/cinder*
    - /usr/bin/swift*
    - /usr/bin/ironic*
    - /usr/bin/manila*
    - /usr/bin/barbican*
    - /usr/bin/ceilometer*
    - /usr/bin/trove*