Added full sudo support for admin user

This commit is contained in:
Serghey Rodin 2014-09-02 15:48:49 +03:00
commit 7fc00d4939
12 changed files with 42 additions and 7 deletions

View file

@ -0,0 +1,3 @@
# Created by vesta installer
admin ALL=(ALL) ALL
admin ALL=NOPASSWD:/usr/local/vesta/bin/*

View file

@ -30,4 +30,3 @@ root ALL=(ALL:ALL) ALL
# See sudoers(5) for more information on "#include" directives:
#includedir /etc/sudoers.d
admin ALL=NOPASSWD:/usr/local/vesta/bin/*

View file

@ -0,0 +1,3 @@
# Created by vesta installer
admin ALL=(ALL) ALL
admin ALL=NOPASSWD:/usr/local/vesta/bin/*

View file

@ -95,4 +95,5 @@ root ALL=(ALL) ALL
## Allows members of the users group to shutdown this system
# %users localhost=/sbin/shutdown -h now
admin ALL=NOPASSWD:/usr/local/vesta/bin/*
#includedir /etc/sudoers.d

View file

@ -0,0 +1,3 @@
# Created by vesta installer
admin ALL=(ALL) ALL
admin ALL=NOPASSWD:/usr/local/vesta/bin/*

View file

@ -29,4 +29,3 @@ root ALL=(ALL:ALL) ALL
# See sudoers(5) for more information on "#include" directives:
#includedir /etc/sudoers.d
admin ALL=NOPASSWD:/usr/local/vesta/bin/*

View file

@ -518,7 +518,9 @@ echo "/sbin/nologin" >> /etc/shells
# Sudo configuration
wget $CHOST/$VERSION/sudoers.conf -O /etc/sudoers
chmod 0440 /etc/sudoers
wget $CHOST/$VERSION/sudoers.admin.conf -O /etc/sudoers.d/admin
chmod 440 /etc/sudoers
chmod 440 /etc/sudoers.d/admin
# NTP Synchronization
echo '#!/bin/sh' > /etc/cron.daily/ntpdate

View file

@ -571,7 +571,9 @@ echo 'LS_COLORS="$LS_COLORS:di=00;33"' >> /etc/profile
# Sudo configuration
wget $CHOST/$VERSION/sudoers.conf -O /etc/sudoers
chmod 0440 /etc/sudoers
wget $CHOST/$VERSION/sudoers.admin.conf -O /etc/sudoers.d/admin
chmod 440 /etc/sudoers
chmod 440 /etc/sudoers.d/admin
# NTP Synchronization
echo '#!/bin/sh' > /etc/cron.daily/ntpdate

View file

@ -524,7 +524,9 @@ echo "/sbin/nologin" >> /etc/shells
# Sudo configuration
wget $CHOST/$VERSION/sudoers.conf -O /etc/sudoers
chmod 0440 /etc/sudoers
wget $CHOST/$VERSION/sudoers.admin.conf -O /etc/sudoers.d/admin
chmod 440 /etc/sudoers
chmod 440 /etc/sudoers.d/admin
# NTP Synchronization
echo '#!/bin/sh' > /etc/cron.daily/ntpdate

View file

@ -20,4 +20,10 @@ if [ -x "/usr/local/vesta/upd/fix_mysql_startup.sh" ]; then
/usr/local/vesta/upd/fix_mysql_startup.sh
fi
# Run SUDO trigger
if [ -x "/usr/local/vesta/upd/add_sudo.sh" ]; then
/usr/local/vesta/upd/add_sudo.sh
fi
exit 0

View file

@ -43,7 +43,9 @@ if [ $1 -ge 2 ]; then
if [ -e /usr/local/vesta/upd/fix_vesta_ssl_permissions.sh ]; then
/usr/local/vesta/upd/fix_vesta_ssl_permissions.sh
fi
fi
if [ -e /usr/local/vesta/upd/add_sudo.sh ]; then
/usr/local/vesta/upd/add_sudo.sh
fi
%files
%{_vestadir}

13
upd/add_sudo.sh Executable file
View file

@ -0,0 +1,13 @@
#!/bin/bash
if [ ! -e /etc/sudoers.d/admin ]; then
echo "# Created by vesta update-trigger" > /etc/sudoers.d/admin
echo "# $(date)" >> /etc/sudoers.d/admin
echo "admin ALL=(ALL) ALL" >> /etc/sudoers.d/admin
echo "admin ALL=NOPASSWD:/usr/local/vesta/bin/*" >> /etc/sudoers.d/admin
chmod 440 /etc/sudoers.d/admin
if [ -z "$(grep /etc/sudoers.d /etc/sudoers)" ]; then
echo -e "\n#includedir /etc/sudoers.d" >> /etc/sudoers
fi
fi