blob: d403ba3c418a32b8e2e12fde16b1fcf6f92040bd [file] [log] [blame]
Petr Michaleceb2e3d22017-02-22 10:32:02 +01001parameters:
2 _param:
3 sudo_shells:
4 - /bin/sh
5 - /bin/ksh
6 - /bin/bash
7 - /bin/rbash
8 - /bin/dash
9 - /bin/zsh
10 - /bin/csh
11 - /bin/fish
12 - /bin/tcsh
13 - /usr/bin/login
14 - /usr/bin/su
15 - /usr/su
16 sudo_restricted_su:
17 - /bin/vi* /etc/sudoers*
18 - /bin/nano /etc/sudoers*
19 - /bin/emacs /etc/sudoers*
20 - /bin/su - root
21 - /bin/su -
22 - /bin/su
23 - /usr/sbin/visudo
Alexander Rubtsov846b2632017-03-16 15:26:33 +040024 sudo_coreutils_safe:
25 - /usr/bin/less
Anatolii Neliubin4159b582017-05-11 09:24:58 +050026 - /usr/bin/strace
27 - /usr/bin/ltrace
28 - /usr/bin/grep
29 - /usr/bin/fgrep
30 - /usr/bin/egrep
31 - /usr/bin/zgrep
32 - /usr/bin/tail
33 - /usr/bin/socat
34 - /usr/bin/top
35 - /usr/bin/tail
36 - /usr/bin/mysql*
37 - /usr/bin/lsof
38 - /usr/bin/virsh
39 - /bin/ls
40 - /bin/cp
41 - /bin/netstat
42 - /bin/kill
Matthew Roarkf6840072017-05-07 20:19:32 -050043 sudo_rabbitmq_safe:
Anatolii Neliubin4159b582017-05-11 09:24:58 +050044 - /usr/sbin/rabbitmqctl
Matthew Roarkf6840072017-05-07 20:19:32 -050045 - /usr/sbin/rabbitmqctl status
46 - /usr/sbin/rabbitmqctl cluster_status
47 - /usr/sbin/rabbitmqctl list_queues*
Petr Michaleceb2e3d22017-02-22 10:32:02 +010048 sudo_salt_safe:
Alexander Dobdin60d726a2017-04-21 13:13:03 +040049 - /usr/bin/salt * state*
50 - /usr/bin/salt * service*
51 - /usr/bin/salt * pillar*
52 - /usr/bin/salt * grains*
53 - /usr/bin/salt * saltutil*
Taylor Mayd42017c2017-05-06 15:39:53 -050054 - /usr/bin/salt * test.ping
Petr Michaleceb2e3d22017-02-22 10:32:02 +010055 - /usr/bin/salt-call state*
56 - /usr/bin/salt-call service*
57 - /usr/bin/salt-call pillar*
58 - /usr/bin/salt-call grains*
59 - /usr/bin/salt-call saltutil*
60 sudo_salt_trusted:
61 - /usr/bin/salt*
Anatolii Neliubin4159b582017-05-11 09:24:58 +050062 sudo_networking_base_utilities:
63 - /sbin/ip
64 - /sbin/ss
65 - /sbin/ifconfig
66 - /sbin/route
67 - /sbin/ethtool
68 - /sbin/tcpdump
69 sudo_contrail_utilities:
70 - /usr/bin/contrail*
71 - /bin/contrail*
72 - /usr/bin/vif
73 - /usr/bin/flow
74 - /usr/bin/vrfstats
75 - /usr/bin/rt
76 - /usr/bin/dropstats
77 - /usr/bin/mpls
78 - /usr/bin/mirror
79 - /usr/bin/vxlan
80 - /usr/bin/nh
81 sudo_storage_utilities:
82 - /usr/bin/ceph*
83 - /usr/bin/rados*
84 - /usr/bin/rbd
85 - /usr/sbin/gluster
86 sudo_openstack_clients:
87 - /usr/bin/openstack
88 - /usr/bin/heat*
89 - /usr/bin/nova*
90 - /usr/bin/neutron*
91 - /usr/bin/keystone*
92 - /usr/bin/glance*
93 - /usr/bin/cinder*
94 - /usr/bin/swift*
95 - /usr/bin/ironic*
96 - /usr/bin/manila*
97 - /usr/bin/barbican*
98 - /usr/bin/ceilometer*
99 - /usr/bin/trove*
100