ITI-3263 added noexec
This commit is contained in:
parent
0de2ca42db
commit
fae6d2bff1
1 changed files with 2 additions and 2 deletions
|
@ -16,10 +16,10 @@
|
||||||
|
|
||||||
# our plos active directory core groups sudoers permissions, filtered by environment
|
# our plos active directory core groups sudoers permissions, filtered by environment
|
||||||
{% set ad_group_maps = salt['grains.filter_by']({
|
{% set ad_group_maps = salt['grains.filter_by']({
|
||||||
'default': { 'default': 'ALL = (root) NOPASSWD: SUPPORT' },
|
'default': { 'default': 'ALL = (root) NOEXEC:NOPASSWD: SUPPORT' },
|
||||||
'vagrant': { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' },
|
'vagrant': { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' },
|
||||||
'dev': { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' },
|
'dev': { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' },
|
||||||
'qa': { 'default': 'ALL = (root) NOPASSWD: SUPPORT',
|
'qa': { 'default': 'ALL = (root) NOEXEC:NOPASSWD: SUPPORT',
|
||||||
'plosqa': 'ALL = (root) NOPASSWD: ALL' },
|
'plosqa': 'ALL = (root) NOPASSWD: ALL' },
|
||||||
},
|
},
|
||||||
grain='environment',
|
grain='environment',
|
||||||
|
|
Loading…
Reference in a new issue