Linux-Help/formula-sudoers
1
0
Fork 0
mirror of synced 2024-11-06 01:08:58 -05:00
Code Issues Releases Wiki Activity

init commit, create lookup table

Browse source
This commit is contained in:
bellaweo 2017-02-14 13:34:39 -08:00
parent 9e23258c9a
commit ebb103d6a4
2 changed files with 18 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
sudoers/files/sudoers
View file

@ -1,3 +1,4 @@
{% from "sudoers/map.jinja" import group_maps with context %}
{%- if (not included) %} {%- if (not included) %}
{%- set sudoers = pillar.get('sudoers', {}) %} {%- set sudoers = pillar.get('sudoers', {}) %}
{%- if grains['os_family'] == 'Debian' %} {%- if grains['os_family'] == 'Debian' %}
@ -91,9 +92,14 @@ Runas_Alias {{ name }} = {{ ",".join(runas) }}
# Group privilege specification # Group privilege specification
{%- for group,specs in groups.items() %} {%- for group,specs in groups.items() %}
{%- for spec in specs %} {%- for spec in specs %}
%{{ group }} {{ spec }} {{ group }} {{ spec }}
{%- endfor %} {%- endfor %}
{%- endfor %} {%- endfor %}
{% for unix_group in in salt['pillar.get']('group_map:core', {}).keys() %}
{% if unix_group in group_map.keys() %}
{{ unix_group }} {{ group_map.unix_group }}
{% else %}
{{ unix_group }} (( group_map.default }}
{% if includedir %} {% if includedir %}
## Read drop-in files from /etc/sudoers.d ## Read drop-in files from /etc/sudoers.d

11
sudoers/map.jinja
View file

@ -13,3 +13,14 @@
'config-path': '/usr/local/etc', 'config-path': '/usr/local/etc',
'group': 'wheel'}, 'group': 'wheel'},
}, merge=salt['pillar.get']('sudoers:lookup', None)) %} }, merge=salt['pillar.get']('sudoers:lookup', None)) %}
{% set group_maps = salt['grains.filter_by']({
'default': { 'default': 'ALL = (ALL:ALL) NOPASSWD: SUPPORT' },
'dev': { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' },
'qa': { 'default': 'ALL = (ALL:ALL) NOPASSWD: SUPPORT',
'plosqa': 'ALL = (ALL:ALL) NOPASSWD: ALL' },
},
grain='environment',
merge=salt['pillar.get']('group_maps:lookup', None)),
default='default'
%}