update sudoers rules for deploy user. add lxc-attach cmd

This commit is contained in:
creme 2020-05-22 17:27:15 +00:00
parent f944f075a3
commit 6fcda2bfc0
1 changed files with 2 additions and 1 deletions

View File

@ -20,6 +20,7 @@ Cmnd_Alias EXCLUDE=!/sbin/halt, !/bin/rm -rf /
# Cmnd alias for deploy user
Cmnd_Alias GITPULL=/usr/bin/git pull *
Cmnd_Alias LXCA=/usr/bin/lxc-attach -n *
Cmnd_Alias MAKE=/usr/bin/make *
Cmnd_Alias MKDOCS=/usr/local/bin/mkdocs *
@ -30,7 +31,7 @@ Cmnd_Alias THELOUNGE=/srv/thelounge/.yarn/bin/thelounge add *
# User privilege specification
root ALL=(ALL:ALL) ALL,EXCLUDE
services ALL=(ALL:ALL) NOPASSWD: ALL,EXCLUDE
deploy ALL=(ALL:ALL) NOPASSWD: GITPULL,MAKE,MKDOCS
deploy ALL=(ALL:ALL) NOPASSWD: GITPULL,LXCA,MAKE,MKDOCS
# Allow members of group sudo to execute any command
%sudo ALL=(ALL:ALL) NOPASSWD: ALL,EXCLUDE