Merge pull request #489 from donaldsharp/sudoers

*: Remove ability to install frr_sudoers for 2.0
This commit is contained in:
Russ White 2017-05-09 19:48:33 -04:00 committed by GitHub
commit 35f8fe3b32
2 changed files with 0 additions and 16 deletions

View File

@ -1,15 +0,0 @@
Defaults env_keep += VTYSH_PAGER
# Allow user in group frr to run vtysh show commands
# without a password by uncommenting the "%frr" line below.
# Subshell commands need to be disallowed, including
# preventing the user passing command line args like 'start-shell'
# Since vtysh allows minimum non-conflicting prefix'es, that means
# anything beginning with the string "st" in any arg. That's a bit
# restrictive.
# Instead, use NOEXEC, to prevent any exec'ed commands.
Cmnd_Alias VTY_SHOW = /usr/bin/vtysh -c show *
# %frr ALL = (root) NOPASSWD:NOEXEC: VTY_SHOW

1
debian/frr.postinst vendored
View File

@ -15,7 +15,6 @@ frrvtygid=`egrep "^frrvty:" $GROUPFILE | awk -F ":" '{ print $3 }'`
chown -R ${frruid}:${frrgid} /etc/frr chown -R ${frruid}:${frrgid} /etc/frr
touch /etc/frr/vtysh.conf touch /etc/frr/vtysh.conf
chgrp ${frrvtygid} /etc/frr/vtysh* chgrp ${frrvtygid} /etc/frr/vtysh*
chmod 440 /etc/sudoers.d/frr_sudoers
chmod 644 /etc/frr/* chmod 644 /etc/frr/*
ENVIRONMENTFILE=/etc/environment ENVIRONMENTFILE=/etc/environment