blob: f11acccc3a4212f39b1500f4b95aade70d8f5b19 [file] [log] [blame]
Petr Michaleceb2e3d22017-02-22 10:32:02 +01001parameters:
2 _param:
3 sudo_shells:
4 - /bin/sh
5 - /bin/ksh
6 - /bin/bash
7 - /bin/rbash
8 - /bin/dash
9 - /bin/zsh
10 - /bin/csh
11 - /bin/fish
12 - /bin/tcsh
13 - /usr/bin/login
14 - /usr/bin/su
15 - /usr/su
16 sudo_restricted_su:
17 - /bin/vi* /etc/sudoers*
18 - /bin/nano /etc/sudoers*
19 - /bin/emacs /etc/sudoers*
20 - /bin/su - root
21 - /bin/su -
22 - /bin/su
23 - /usr/sbin/visudo
Petr Michalec6e6ead42017-08-01 11:10:46 +020024 - /usr/bin/sudo
Petr Michalece9f85442017-08-10 14:22:57 +020025 - /bin/bash
Alexander Rubtsov846b2632017-03-16 15:26:33 +040026 sudo_coreutils_safe:
27 - /usr/bin/less
Anatolii Neliubin4159b582017-05-11 09:24:58 +050028 - /usr/bin/grep
29 - /usr/bin/fgrep
30 - /usr/bin/egrep
31 - /usr/bin/zgrep
32 - /usr/bin/tail
33 - /usr/bin/socat
34 - /usr/bin/top
35 - /usr/bin/tail
Anatolii Neliubin4159b582017-05-11 09:24:58 +050036 - /usr/bin/lsof
37 - /usr/bin/virsh
38 - /bin/ls
39 - /bin/cp
40 - /bin/netstat
Matthew Roarkf6840072017-05-07 20:19:32 -050041 sudo_rabbitmq_safe:
Anatolii Neliubin4159b582017-05-11 09:24:58 +050042 - /usr/sbin/rabbitmqctl
Matthew Roarkf6840072017-05-07 20:19:32 -050043 - /usr/sbin/rabbitmqctl status
44 - /usr/sbin/rabbitmqctl cluster_status
45 - /usr/sbin/rabbitmqctl list_queues*
Petr Michaleceb2e3d22017-02-22 10:32:02 +010046 sudo_salt_safe:
Alexander Dobdin60d726a2017-04-21 13:13:03 +040047 - /usr/bin/salt * state*
48 - /usr/bin/salt * service*
49 - /usr/bin/salt * pillar*
50 - /usr/bin/salt * grains*
51 - /usr/bin/salt * saltutil*
Taylor Mayd42017c2017-05-06 15:39:53 -050052 - /usr/bin/salt * test.ping
Petr Michaleceb2e3d22017-02-22 10:32:02 +010053 - /usr/bin/salt-call state*
54 - /usr/bin/salt-call service*
55 - /usr/bin/salt-call pillar*
56 - /usr/bin/salt-call grains*
57 - /usr/bin/salt-call saltutil*
58 sudo_salt_trusted:
59 - /usr/bin/salt*
Anatolii Neliubin992df7c2017-05-17 10:57:34 +050060 sudo_networking:
Anatolii Neliubin4159b582017-05-11 09:24:58 +050061 - /sbin/ip
62 - /sbin/ss
63 - /sbin/ifconfig
64 - /sbin/route
65 - /sbin/ethtool
66 - /sbin/tcpdump
67 sudo_contrail_utilities:
68 - /usr/bin/contrail*
69 - /bin/contrail*
70 - /usr/bin/vif
71 - /usr/bin/flow
72 - /usr/bin/vrfstats
73 - /usr/bin/rt
74 - /usr/bin/dropstats
75 - /usr/bin/mpls
76 - /usr/bin/mirror
77 - /usr/bin/vxlan
78 - /usr/bin/nh
79 sudo_storage_utilities:
80 - /usr/bin/ceph*
81 - /usr/bin/rados*
82 - /usr/bin/rbd
83 - /usr/sbin/gluster
84 sudo_openstack_clients:
85 - /usr/bin/openstack
86 - /usr/bin/heat*
87 - /usr/bin/nova*
88 - /usr/bin/neutron*
89 - /usr/bin/keystone*
90 - /usr/bin/glance*
91 - /usr/bin/cinder*
92 - /usr/bin/swift*
93 - /usr/bin/ironic*
94 - /usr/bin/manila*
95 - /usr/bin/barbican*
96 - /usr/bin/ceilometer*
97 - /usr/bin/trove*
98