forked from linux/documentation
27 lines
814 B
Markdown
27 lines
814 B
Markdown
# Custom sudo Rules
|
|
|
|
Custom sudo rules can be specify in hiera as follows:
|
|
|
|
```yaml
|
|
aaa::sudo_rules:
|
|
- 'Defaults:telegraf !requiretty, !syslog'
|
|
- 'telegraf ALL=(root) NOPASSWD: /usr/lib/telegraf/scripts/nxserver_report.sh'
|
|
```
|
|
|
|
If the rules should be grouped in separate files in /etc/sudoers.d, you can use the following syntax:
|
|
|
|
```yaml
|
|
aaa::sudoersd:
|
|
sysctl_drop_caches:
|
|
- "Defaults:testuser !requiretty"
|
|
- "testuser ALL=(root) NOPASSWD: /usr/sbin/sysctl -w vm.drop_caches=1"
|
|
- "testuser ALL=(root) NOPASSWD: /usr/sbin/sysctl -w vm.drop_caches=3"
|
|
```
|
|
|
|
This will create a file `/etc/sudoers.d/sysctl_drop_caches` with the specified content.
|
|
|
|
Beside that you might also simply deploy a file to /etc/sudoers.d e.g. via a technique described in [Distribute Files](../files/distribute_files).
|
|
|
|
|
|
|