1
0
Fork 0
mirror of synced 2024-12-22 06:01:07 -05:00

ITI-3263 added noexec

This commit is contained in:
Eldo Varghese 2018-03-07 16:38:01 -08:00
parent 0de2ca42db
commit fae6d2bff1

View file

@ -16,10 +16,10 @@
# our plos active directory core groups sudoers permissions, filtered by environment # our plos active directory core groups sudoers permissions, filtered by environment
{% set ad_group_maps = salt['grains.filter_by']({ {% set ad_group_maps = salt['grains.filter_by']({
'default': { 'default': 'ALL = (root) NOPASSWD: SUPPORT' }, 'default': { 'default': 'ALL = (root) NOEXEC:NOPASSWD: SUPPORT' },
'vagrant': { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' }, 'vagrant': { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' },
'dev': { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' }, 'dev': { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' },
'qa': { 'default': 'ALL = (root) NOPASSWD: SUPPORT', 'qa': { 'default': 'ALL = (root) NOEXEC:NOPASSWD: SUPPORT',
'plosqa': 'ALL = (root) NOPASSWD: ALL' }, 'plosqa': 'ALL = (root) NOPASSWD: ALL' },
}, },
grain='environment', grain='environment',