openstack-ansible-os_neutron/templates/sudoers.j2
Mohammed Naser 668fb5a054 Add privsep-helper to neutron sudoers file
With the new oslo-privsep library, there is now a
privsep-helper command that is used to escalate
privledges.

This command needs to be runnable by the neutron user
via sudo without a password. The old rootwrap command
is still used as well, so for now we need to have
both.

Change-Id: I8e9743da3e51e71a113d958c22007cf54aa17fc4
2019-04-01 14:04:01 +00:00

9 lines
521 B
Django/Jinja

# {{ ansible_managed }}
Defaults:{{ neutron_system_user_name }} !requiretty
Defaults:{{ neutron_system_user_name }} secure_path="{{ neutron_bin }}:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
{{ neutron_system_user_name }} ALL = (root) NOPASSWD: {{ neutron_bin }}/{{ neutron_service_name }}-rootwrap
{{ neutron_system_user_name }} ALL = (root) NOPASSWD: {{ neutron_bin }}/{{ neutron_service_name }}-rootwrap-daemon
{{ neutron_system_user_name }} ALL = (root) NOPASSWD: {{ neutron_bin }}/privsep-helper