blob: ba499d187e5b33867ec06a821f408377a009c063 [file] [log] [blame]
Petr Michaleceb2e3d22017-02-22 10:32:02 +01001parameters:
2 _param:
3 sudo_shells:
4 - /bin/sh
5 - /bin/ksh
6 - /bin/bash
7 - /bin/rbash
8 - /bin/dash
9 - /bin/zsh
10 - /bin/csh
11 - /bin/fish
12 - /bin/tcsh
13 - /usr/bin/login
14 - /usr/bin/su
15 - /usr/su
16 sudo_restricted_su:
17 - /bin/vi* /etc/sudoers*
18 - /bin/nano /etc/sudoers*
19 - /bin/emacs /etc/sudoers*
20 - /bin/su - root
21 - /bin/su -
22 - /bin/su
23 - /usr/sbin/visudo
Petr Michalec6e6ead42017-08-01 11:10:46 +020024 - /usr/bin/sudo
Alexander Rubtsov846b2632017-03-16 15:26:33 +040025 sudo_coreutils_safe:
26 - /usr/bin/less
Anatolii Neliubin4159b582017-05-11 09:24:58 +050027 - /usr/bin/grep
28 - /usr/bin/fgrep
29 - /usr/bin/egrep
30 - /usr/bin/zgrep
31 - /usr/bin/tail
32 - /usr/bin/socat
33 - /usr/bin/top
34 - /usr/bin/tail
Anatolii Neliubin4159b582017-05-11 09:24:58 +050035 - /usr/bin/lsof
36 - /usr/bin/virsh
37 - /bin/ls
38 - /bin/cp
39 - /bin/netstat
Matthew Roarkf6840072017-05-07 20:19:32 -050040 sudo_rabbitmq_safe:
Anatolii Neliubin4159b582017-05-11 09:24:58 +050041 - /usr/sbin/rabbitmqctl
Matthew Roarkf6840072017-05-07 20:19:32 -050042 - /usr/sbin/rabbitmqctl status
43 - /usr/sbin/rabbitmqctl cluster_status
44 - /usr/sbin/rabbitmqctl list_queues*
Petr Michaleceb2e3d22017-02-22 10:32:02 +010045 sudo_salt_safe:
Alexander Dobdin60d726a2017-04-21 13:13:03 +040046 - /usr/bin/salt * state*
47 - /usr/bin/salt * service*
48 - /usr/bin/salt * pillar*
49 - /usr/bin/salt * grains*
50 - /usr/bin/salt * saltutil*
Taylor Mayd42017c2017-05-06 15:39:53 -050051 - /usr/bin/salt * test.ping
Petr Michaleceb2e3d22017-02-22 10:32:02 +010052 - /usr/bin/salt-call state*
53 - /usr/bin/salt-call service*
54 - /usr/bin/salt-call pillar*
55 - /usr/bin/salt-call grains*
56 - /usr/bin/salt-call saltutil*
57 sudo_salt_trusted:
58 - /usr/bin/salt*
Anatolii Neliubin992df7c2017-05-17 10:57:34 +050059 sudo_networking:
Anatolii Neliubin4159b582017-05-11 09:24:58 +050060 - /sbin/ip
61 - /sbin/ss
62 - /sbin/ifconfig
63 - /sbin/route
64 - /sbin/ethtool
65 - /sbin/tcpdump
66 sudo_contrail_utilities:
67 - /usr/bin/contrail*
68 - /bin/contrail*
69 - /usr/bin/vif
70 - /usr/bin/flow
71 - /usr/bin/vrfstats
72 - /usr/bin/rt
73 - /usr/bin/dropstats
74 - /usr/bin/mpls
75 - /usr/bin/mirror
76 - /usr/bin/vxlan
77 - /usr/bin/nh
78 sudo_storage_utilities:
79 - /usr/bin/ceph*
80 - /usr/bin/rados*
81 - /usr/bin/rbd
82 - /usr/sbin/gluster
83 sudo_openstack_clients:
84 - /usr/bin/openstack
85 - /usr/bin/heat*
86 - /usr/bin/nova*
87 - /usr/bin/neutron*
88 - /usr/bin/keystone*
89 - /usr/bin/glance*
90 - /usr/bin/cinder*
91 - /usr/bin/swift*
92 - /usr/bin/ironic*
93 - /usr/bin/manila*
94 - /usr/bin/barbican*
95 - /usr/bin/ceilometer*
96 - /usr/bin/trove*
97