summaryrefslogtreecommitdiffstats
path: root/satellit_installer/includes/10-sudo_config.inc
blob: e37a7d166d91e2bb4265dbd0d377af22ee1c21a3 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
sudo_config() {

	local TM_SUDO_CONF="/etc/sudoers.d/taskmanager"
	[ -n "$1" ] && TM_SUDO_CONF="$1"

	cat > "${TM_SUDO_CONF}" <<-EOF
		# Sudoers configuration for user 'taskmanager'
		# Auto-generated on: $(date)
		taskmanager ALL=(ldadp) NOPASSWD: /opt/taskmanager/scripts/ldadp-launcher
		taskmanager ALL=(root) NOPASSWD: /sbin/reboot
		taskmanager ALL=(root) NOPASSWD: /bin/netstat
		taskmanager ALL=(root) NOPASSWD: /bin/systemctl start dmsd
		taskmanager ALL=(root) NOPASSWD: /bin/systemctl stop dmsd
		taskmanager ALL=(root) NOPASSWD: /bin/systemctl enable dmsd
		taskmanager ALL=(root) NOPASSWD: /bin/systemctl disable dmsd
		taskmanager ALL=(root) NOPASSWD: /bin/systemctl restart dmsd
		taskmanager ALL=(root) NOPASSWD: /bin/systemctl status dmsd
		taskmanager ALL=(root) NOPASSWD: /bin/systemctl start dnbd3-server
		taskmanager ALL=(root) NOPASSWD: /bin/systemctl stop dnbd3-server
		taskmanager ALL=(root) NOPASSWD: /bin/systemctl enable dnbd3-server
		taskmanager ALL=(root) NOPASSWD: /bin/systemctl disable dnbd3-server
		taskmanager ALL=(root) NOPASSWD: /bin/systemctl restart dnbd3-server
		taskmanager ALL=(root) NOPASSWD: /bin/systemctl status dnbd3-server
		taskmanager ALL=(root) NOPASSWD: /bin/systemctl restart taskmanager
		taskmanager ALL=(root) NOPASSWD: /bin/systemctl status taskmanager
		taskmanager ALL=(root) NOPASSWD: /opt/taskmanager/scripts/mount-store
		taskmanager ALL=(root) NOPASSWD: /opt/taskmanager/scripts/system-backup
		taskmanager ALL=(root) NOPASSWD: /opt/taskmanager/scripts/system-restore
		taskmanager ALL=(root) NOPASSWD: /opt/taskmanager/scripts/install-https
		taskmanager ALL=(root) NOPASSWD: /opt/taskmanager/scripts/ldadp-setperms
		ALL ALL=(www-data) NOPASSWD: /usr/local/bin/slxlog
		Defaults env_keep += "TM_*"
	EOF
	chmod 0440 "${TM_SUDO_CONF}" || perror "# Could not set perms of '${TM_SUDO_CONF}' to 0440!"
}