From b41e250b63d80c56d569eecf8680d03bc87b46fe Mon Sep 17 00:00:00 2001 From: Alexander van Amesfoort <amesfoort@astron.nl> Date: Tue, 23 Aug 2016 09:30:44 +0000 Subject: [PATCH] Task #9127: update r35149 to micro improve setcap_cobalt sudoers file --- RTCP/Cobalt/OutputProc/etc/sudoers.d/setcap_cobalt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/RTCP/Cobalt/OutputProc/etc/sudoers.d/setcap_cobalt b/RTCP/Cobalt/OutputProc/etc/sudoers.d/setcap_cobalt index 97ab1655685..df16728cb6d 100644 --- a/RTCP/Cobalt/OutputProc/etc/sudoers.d/setcap_cobalt +++ b/RTCP/Cobalt/OutputProc/etc/sudoers.d/setcap_cobalt @@ -1,5 +1,5 @@ ## Allows lofarbuild to add the listed capabilities to any single writable file for automated roll-out. ## Attempts to disallow adding another set of capabilities. ## Does not attempt to disallow adding the listed capabilities to other files, which would be trivial to bypass. -Cmnd_Alias SETCAP_COBALT = /sbin/setcap cap_net_raw\,cap_sys_nice\,cap_ipc_lock+ep *, ! /sbin/setcap cap_net_raw\,cap_sys_nice\,cap_ipc_lock+ep * * +Cmnd_Alias SETCAP_COBALT = /sbin/setcap cap_net_raw\,cap_sys_nice\,cap_ipc_lock=ep *, ! /sbin/setcap cap_net_raw\,cap_sys_nice\,cap_ipc_lock=ep * * lofarbuild ALL = (root) NOPASSWD: SETCAP_COBALT -- GitLab