| Petr Michalec | eb2e3d2 | 2017-02-22 10:32:02 +0100 | [diff] [blame] | 1 | parameters: |
| 2 | _param: |
| 3 | sudo_shells: |
| 4 | - /bin/sh |
| 5 | - /bin/ksh |
| 6 | - /bin/bash |
| 7 | - /bin/rbash |
| 8 | - /bin/dash |
| 9 | - /bin/zsh |
| 10 | - /bin/csh |
| 11 | - /bin/fish |
| 12 | - /bin/tcsh |
| 13 | - /usr/bin/login |
| 14 | - /usr/bin/su |
| 15 | - /usr/su |
| 16 | sudo_restricted_su: |
| 17 | - /bin/vi* /etc/sudoers* |
| 18 | - /bin/nano /etc/sudoers* |
| 19 | - /bin/emacs /etc/sudoers* |
| 20 | - /bin/su - root |
| 21 | - /bin/su - |
| 22 | - /bin/su |
| 23 | - /usr/sbin/visudo |
| Petr Michalec | 6e6ead4 | 2017-08-01 11:10:46 +0200 | [diff] [blame] | 24 | - /usr/bin/sudo |
| Alexander Rubtsov | 846b263 | 2017-03-16 15:26:33 +0400 | [diff] [blame] | 25 | sudo_coreutils_safe: |
| Petr Michalec | bcfa7cf | 2017-08-10 17:57:56 +0200 | [diff] [blame^] | 26 | - /usr/bin/cat |
| Alexander Rubtsov | 846b263 | 2017-03-16 15:26:33 +0400 | [diff] [blame] | 27 | - /usr/bin/less |
| Petr Michalec | bcfa7cf | 2017-08-10 17:57:56 +0200 | [diff] [blame^] | 28 | - /usr/bin/view |
| 29 | - /usr/bin/more |
| Anatolii Neliubin | 4159b58 | 2017-05-11 09:24:58 +0500 | [diff] [blame] | 30 | - /usr/bin/grep |
| 31 | - /usr/bin/fgrep |
| 32 | - /usr/bin/egrep |
| 33 | - /usr/bin/zgrep |
| Petr Michalec | bcfa7cf | 2017-08-10 17:57:56 +0200 | [diff] [blame^] | 34 | - /usr/bin/ack |
| Anatolii Neliubin | 4159b58 | 2017-05-11 09:24:58 +0500 | [diff] [blame] | 35 | - /usr/bin/tail |
| 36 | - /usr/bin/socat |
| 37 | - /usr/bin/top |
| Petr Michalec | bcfa7cf | 2017-08-10 17:57:56 +0200 | [diff] [blame^] | 38 | - /usr/bin/atop |
| Anatolii Neliubin | 4159b58 | 2017-05-11 09:24:58 +0500 | [diff] [blame] | 39 | - /usr/bin/tail |
| Anatolii Neliubin | 4159b58 | 2017-05-11 09:24:58 +0500 | [diff] [blame] | 40 | - /usr/bin/lsof |
| 41 | - /usr/bin/virsh |
| 42 | - /bin/ls |
| 43 | - /bin/cp |
| 44 | - /bin/netstat |
| Petr Michalec | bcfa7cf | 2017-08-10 17:57:56 +0200 | [diff] [blame^] | 45 | sudo_coreutils_trusted: |
| 46 | - /usr/bin/vi* |
| 47 | - /usr/bin/vim* |
| 48 | - /usr/bin/emacs* |
| 49 | - /usr/bin/nano* |
| Matthew Roark | f684007 | 2017-05-07 20:19:32 -0500 | [diff] [blame] | 50 | sudo_rabbitmq_safe: |
| Anatolii Neliubin | 4159b58 | 2017-05-11 09:24:58 +0500 | [diff] [blame] | 51 | - /usr/sbin/rabbitmqctl |
| Matthew Roark | f684007 | 2017-05-07 20:19:32 -0500 | [diff] [blame] | 52 | - /usr/sbin/rabbitmqctl status |
| 53 | - /usr/sbin/rabbitmqctl cluster_status |
| 54 | - /usr/sbin/rabbitmqctl list_queues* |
| Petr Michalec | eb2e3d2 | 2017-02-22 10:32:02 +0100 | [diff] [blame] | 55 | sudo_salt_safe: |
| Alexander Dobdin | 60d726a | 2017-04-21 13:13:03 +0400 | [diff] [blame] | 56 | - /usr/bin/salt * state* |
| 57 | - /usr/bin/salt * service* |
| 58 | - /usr/bin/salt * pillar* |
| 59 | - /usr/bin/salt * grains* |
| 60 | - /usr/bin/salt * saltutil* |
| Taylor May | d42017c | 2017-05-06 15:39:53 -0500 | [diff] [blame] | 61 | - /usr/bin/salt * test.ping |
| Petr Michalec | eb2e3d2 | 2017-02-22 10:32:02 +0100 | [diff] [blame] | 62 | - /usr/bin/salt-call state* |
| 63 | - /usr/bin/salt-call service* |
| 64 | - /usr/bin/salt-call pillar* |
| 65 | - /usr/bin/salt-call grains* |
| 66 | - /usr/bin/salt-call saltutil* |
| 67 | sudo_salt_trusted: |
| 68 | - /usr/bin/salt* |
| Anatolii Neliubin | 992df7c | 2017-05-17 10:57:34 +0500 | [diff] [blame] | 69 | sudo_networking: |
| Anatolii Neliubin | 4159b58 | 2017-05-11 09:24:58 +0500 | [diff] [blame] | 70 | - /sbin/ip |
| 71 | - /sbin/ss |
| 72 | - /sbin/ifconfig |
| 73 | - /sbin/route |
| 74 | - /sbin/ethtool |
| 75 | - /sbin/tcpdump |
| 76 | sudo_contrail_utilities: |
| 77 | - /usr/bin/contrail* |
| 78 | - /bin/contrail* |
| 79 | - /usr/bin/vif |
| 80 | - /usr/bin/flow |
| 81 | - /usr/bin/vrfstats |
| 82 | - /usr/bin/rt |
| 83 | - /usr/bin/dropstats |
| 84 | - /usr/bin/mpls |
| 85 | - /usr/bin/mirror |
| 86 | - /usr/bin/vxlan |
| 87 | - /usr/bin/nh |
| 88 | sudo_storage_utilities: |
| 89 | - /usr/bin/ceph* |
| 90 | - /usr/bin/rados* |
| 91 | - /usr/bin/rbd |
| 92 | - /usr/sbin/gluster |
| Petr Michalec | bcfa7cf | 2017-08-10 17:57:56 +0200 | [diff] [blame^] | 93 | - /usr/fdisk -l * |
| 94 | - /usr/bin/du * |
| 95 | - /bin/df * |
| Anatolii Neliubin | 4159b58 | 2017-05-11 09:24:58 +0500 | [diff] [blame] | 96 | sudo_openstack_clients: |
| 97 | - /usr/bin/openstack |
| 98 | - /usr/bin/heat* |
| 99 | - /usr/bin/nova* |
| 100 | - /usr/bin/neutron* |
| 101 | - /usr/bin/keystone* |
| 102 | - /usr/bin/glance* |
| 103 | - /usr/bin/cinder* |
| 104 | - /usr/bin/swift* |
| 105 | - /usr/bin/ironic* |
| 106 | - /usr/bin/manila* |
| 107 | - /usr/bin/barbican* |
| 108 | - /usr/bin/ceilometer* |
| 109 | - /usr/bin/trove* |
| 110 | |