Skip to content
Snippets Groups Projects
Commit b41e250b authored by Alexander van Amesfoort's avatar Alexander van Amesfoort
Browse files

Task #9127: update r35149 to micro improve setcap_cobalt sudoers file

parent b9c0e025
No related branches found
No related tags found
No related merge requests found
## Allows lofarbuild to add the listed capabilities to any single writable file for automated roll-out.
## Attempts to disallow adding another set of capabilities.
## Does not attempt to disallow adding the listed capabilities to other files, which would be trivial to bypass.
Cmnd_Alias SETCAP_COBALT = /sbin/setcap cap_net_raw\,cap_sys_nice\,cap_ipc_lock+ep *, ! /sbin/setcap cap_net_raw\,cap_sys_nice\,cap_ipc_lock+ep * *
Cmnd_Alias SETCAP_COBALT = /sbin/setcap cap_net_raw\,cap_sys_nice\,cap_ipc_lock=ep *, ! /sbin/setcap cap_net_raw\,cap_sys_nice\,cap_ipc_lock=ep * *
lofarbuild ALL = (root) NOPASSWD: SETCAP_COBALT
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment