psi-jack/formula-sudoers
1
0
Fork 0
mirror of synced 2024-11-22 00:35:36 -05:00
Code Issues Releases Wiki Activity

Merge pull request #72 from myii/refactor/use-top-level-values-in-map-jinja-dumps

Browse source 
refactor(map): use top-level `values:` key in `map.jinja` dumps
This commit is contained in:
Imran Iqbal 2020-12-23 18:46:35 +00:00 committed by GitHub
commit 6f21f9455b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
17 changed files with 969 additions and 912 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
sudoers/_mapdata/_mapdata.jinja
View file

@ -1,9 +1,9 @@
# yamllint disable rule:indentation rule:line-length # yamllint disable rule:indentation rule:line-length
# {{ grains.get('osfinger', grains.os) }} # {{ grains.get("osfinger", grains.os) }}
--- ---
{#- use salt.slsutil.serialize to avoid encoding errors on some platforms #} {#- use salt.slsutil.serialize to avoid encoding errors on some platforms #}
{{ salt['slsutil.serialize']( {{ salt["slsutil.serialize"](
'yaml', "yaml",
map, map,
default_flow_style=False, default_flow_style=False,
allow_unicode=True, allow_unicode=True,

17
sudoers/_mapdata/init.sls
View file

@ -2,13 +2,18 @@
# vim: ft=sls # vim: ft=sls
--- ---
{#- Get the `tplroot` from `tpldir` #} {#- Get the `tplroot` from `tpldir` #}
{%- set tplroot = tpldir.split('/')[0] %} {%- set tplroot = tpldir.split("/")[0] %}
{%- from tplroot ~ "/map.jinja" import sudoers as mapdata with context %} {%- from tplroot ~ "/map.jinja" import sudoers with context %}
{%- do salt['log.debug']('### MAP.JINJA DUMP ###\n' ~ mapdata | yaml(False)) %} {%- set _mapdata = {
"values": {
"sudoers": sudoers,
}
} %}
{%- do salt["log.debug"]("### MAP.JINJA DUMP ###\n" ~ _mapdata | yaml(False)) %}
{%- set output_dir = '/temp' if grains.os_family == 'Windows' else '/tmp' %} {%- set output_dir = "/temp" if grains.os_family == "Windows" else "/tmp" %}
{%- set output_file = output_dir ~ '/salt_mapdata_dump.yaml' %} {%- set output_file = output_dir ~ "/salt_mapdata_dump.yaml" %}
{{ tplroot }}-mapdata-dump: {{ tplroot }}-mapdata-dump:
file.managed: file.managed:
@ -16,4 +21,4 @@
- source: salt://{{ tplroot }}/_mapdata/_mapdata.jinja - source: salt://{{ tplroot }}/_mapdata/_mapdata.jinja
- template: jinja - template: jinja
- context: - context:
map: {{ mapdata | yaml }} map: {{ _mapdata | yaml }}

38
test/integration/default/controls/_mapdata_spec.rb
View file

@ -5,19 +5,43 @@ require 'yaml'
control '`map.jinja` YAML dump' do control '`map.jinja` YAML dump' do
title 'should match the comparison file' title 'should match the comparison file'
### Method
# The steps below for each file appear convoluted but they are both required
# and similar in nature:
# 1. The earliest method was to simply compare the files textually but this often
# led to false positives due to inconsistencies (e.g. spacing, ordering)
# 2. The next method was to load the files back into YAML structures and then
# compare but InSpec provided block diffs this way, unusable by end users
# 3. The final step was to dump the YAML structures back into a string to use
# for the comparison; this both worked and provided human-friendly diffs
### Comparison file for the specific platform
### Static, adjusted as part of code contributions, as map data is changed
# Strip the `platform[:finger]` version number down to the "OS major release" # Strip the `platform[:finger]` version number down to the "OS major release"
mapdata_file = "_mapdata/#{system.platform[:finger].split('.').first}.yaml" platform_finger = system.platform[:finger].split('.').first.to_s
# Use that to set the path to the file (relative to the InSpec suite directory)
mapdata_file_path = "_mapdata/#{platform_finger}.yaml"
# Load the mapdata from profile, into a YAML structure
# https://docs.chef.io/inspec/profiles/#profile-files
mapdata_file_yaml = YAML.safe_load(inspec.profile.file(mapdata_file_path))
# Dump the YAML back into a string for comparison
mapdata_file_dump = YAML.dump(mapdata_file_yaml)
# Load the mapdata from profile https://docs.chef.io/inspec/profiles/#profile-files ### Output file produced by running the `_mapdata` state
mapdata_dump = YAML.safe_load(inspec.profile.file(mapdata_file)) ### Dynamic, generated during Kitchen's `converge` phase
# Derive the location of the dumped mapdata (differs for Windows)
# Derive the location of the dumped mapdata
output_dir = platform[:family] == 'windows' ? '/temp' : '/tmp' output_dir = platform[:family] == 'windows' ? '/temp' : '/tmp'
output_file = "#{output_dir}/salt_mapdata_dump.yaml" # Use that to set the path to the file (absolute path, i.e. within the container)
output_file_path = "#{output_dir}/salt_mapdata_dump.yaml"
# Load the output into a YAML structure using InSpec's `yaml` resource
# https://github.com/inspec/inspec/blob/49b7d10/lib/inspec/resources/yaml.rb#L29
output_file_yaml = yaml(output_file_path).params
# Dump the YAML back into a string for comparison
output_file_dump = YAML.dump(output_file_yaml)
describe 'File content' do describe 'File content' do
it 'should match profile map data exactly' do it 'should match profile map data exactly' do
expect(yaml(output_file).params).to eq(mapdata_dump) expect(output_file_dump).to eq(mapdata_file_dump)
end end
end end
end end

130
test/integration/default/files/_mapdata/amazonlinux-1.yaml
View file

@ -1,69 +1,71 @@
# yamllint disable rule:indentation rule:line-length # yamllint disable rule:indentation rule:line-length
# Amazon Linux AMI-2018 # Amazon Linux AMI-2018
--- ---
aliases: values:
commands: sudoers:
PROCESSES: aliases:
- /usr/bin/nice commands:
- /bin/kill PROCESSES:
- /usr/bin/renice - /usr/bin/nice
- /usr/bin/pkill - /bin/kill
- /usr/bin/top - /usr/bin/renice
hosts: - /usr/bin/pkill
WEBSERVERS: - /usr/bin/top
- www1 hosts:
- www2 WEBSERVERS:
- www3 - www1
users: - www2
ADMINS: - www3
- millert users:
- dowdy ADMINS:
- mikef - millert
arch: amd64 - dowdy
configpath: /etc - mikef
defaults: arch: amd64
command_list: configpath: /etc
PROCESSES: noexec defaults:
generic: command_list:
- env_reset PROCESSES: noexec
- mail_badpass generic:
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - env_reset
host_list: - mail_badpass
www1: log_year, logfile=/var/log/sudo.log - secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
runas_list: host_list:
root: '!set_logname' www1: log_year, logfile=/var/log/sudo.log
user_list: runas_list:
ADMINS: '!lecture' root: '!set_logname'
johndoe: '!requiretty' user_list:
execprefix: /usr/sbin ADMINS: '!lecture'
group: root johndoe: '!requiretty'
groups: execprefix: /usr/sbin
sudo: group: root
- ALL=(ALL) ALL
- 'ALL=(nodejs) NOPASSWD: ALL'
included_files:
/etc/sudoers.d/extra-file:
users:
foo:
- ALL=(ALL) ALL
extra-file-2:
groups: groups:
bargroup: sudo:
- 'ALL=(ALL) NOPASSWD: ALL'
extra-file-3:
netgroups:
other_netgroup:
- ALL=(ALL) ALL - ALL=(ALL) ALL
includedir: /etc/sudoers.d - 'ALL=(nodejs) NOPASSWD: ALL'
manage_main_config: true included_files:
netgroups: /etc/sudoers.d/extra-file:
sysadmins: users:
- ALL=(ALL) ALL foo:
pkg: sudo - ALL=(ALL) ALL
purge_includedir: false extra-file-2:
users: groups:
johndoe: bargroup:
- ALL=(ALL) ALL - 'ALL=(ALL) NOPASSWD: ALL'
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd' extra-file-3:
kitchen: netgroups:
- 'ALL=(root) NOPASSWD: ALL' other_netgroup:
- ALL=(ALL) ALL
includedir: /etc/sudoers.d
manage_main_config: true
netgroups:
sysadmins:
- ALL=(ALL) ALL
pkg: sudo
purge_includedir: false
users:
johndoe:
- ALL=(ALL) ALL
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd'
kitchen:
- 'ALL=(root) NOPASSWD: ALL'

130
test/integration/default/files/_mapdata/amazonlinux-2.yaml
View file

@ -1,69 +1,71 @@
# yamllint disable rule:indentation rule:line-length # yamllint disable rule:indentation rule:line-length
# Amazon Linux-2 # Amazon Linux-2
--- ---
aliases: values:
commands: sudoers:
PROCESSES: aliases:
- /usr/bin/nice commands:
- /bin/kill PROCESSES:
- /usr/bin/renice - /usr/bin/nice
- /usr/bin/pkill - /bin/kill
- /usr/bin/top - /usr/bin/renice
hosts: - /usr/bin/pkill
WEBSERVERS: - /usr/bin/top
- www1 hosts:
- www2 WEBSERVERS:
- www3 - www1
users: - www2
ADMINS: - www3
- millert users:
- dowdy ADMINS:
- mikef - millert
arch: amd64 - dowdy
configpath: /etc - mikef
defaults: arch: amd64
command_list: configpath: /etc
PROCESSES: noexec defaults:
generic: command_list:
- env_reset PROCESSES: noexec
- mail_badpass generic:
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - env_reset
host_list: - mail_badpass
www1: log_year, logfile=/var/log/sudo.log - secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
runas_list: host_list:
root: '!set_logname' www1: log_year, logfile=/var/log/sudo.log
user_list: runas_list:
ADMINS: '!lecture' root: '!set_logname'
johndoe: '!requiretty' user_list:
execprefix: /usr/sbin ADMINS: '!lecture'
group: root johndoe: '!requiretty'
groups: execprefix: /usr/sbin
sudo: group: root
- ALL=(ALL) ALL
- 'ALL=(nodejs) NOPASSWD: ALL'
included_files:
/etc/sudoers.d/extra-file:
users:
foo:
- ALL=(ALL) ALL
extra-file-2:
groups: groups:
bargroup: sudo:
- 'ALL=(ALL) NOPASSWD: ALL'
extra-file-3:
netgroups:
other_netgroup:
- ALL=(ALL) ALL - ALL=(ALL) ALL
includedir: /etc/sudoers.d - 'ALL=(nodejs) NOPASSWD: ALL'
manage_main_config: true included_files:
netgroups: /etc/sudoers.d/extra-file:
sysadmins: users:
- ALL=(ALL) ALL foo:
pkg: sudo - ALL=(ALL) ALL
purge_includedir: false extra-file-2:
users: groups:
johndoe: bargroup:
- ALL=(ALL) ALL - 'ALL=(ALL) NOPASSWD: ALL'
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd' extra-file-3:
kitchen: netgroups:
- 'ALL=(root) NOPASSWD: ALL' other_netgroup:
- ALL=(ALL) ALL
includedir: /etc/sudoers.d
manage_main_config: true
netgroups:
sysadmins:
- ALL=(ALL) ALL
pkg: sudo
purge_includedir: false
users:
johndoe:
- ALL=(ALL) ALL
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd'
kitchen:
- 'ALL=(root) NOPASSWD: ALL'

130
test/integration/default/files/_mapdata/arch-base-latest.yaml
View file

@ -1,69 +1,71 @@
# yamllint disable rule:indentation rule:line-length # yamllint disable rule:indentation rule:line-length
# Arch # Arch
--- ---
aliases: values:
commands: sudoers:
PROCESSES: aliases:
- /usr/bin/nice commands:
- /bin/kill PROCESSES:
- /usr/bin/renice - /usr/bin/nice
- /usr/bin/pkill - /bin/kill
- /usr/bin/top - /usr/bin/renice
hosts: - /usr/bin/pkill
WEBSERVERS: - /usr/bin/top
- www1 hosts:
- www2 WEBSERVERS:
- www3 - www1
users: - www2
ADMINS: - www3
- millert users:
- dowdy ADMINS:
- mikef - millert
arch: amd64 - dowdy
configpath: /etc - mikef
defaults: arch: amd64
command_list: configpath: /etc
PROCESSES: noexec defaults:
generic: command_list:
- env_reset PROCESSES: noexec
- mail_badpass generic:
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - env_reset
host_list: - mail_badpass
www1: log_year, logfile=/var/log/sudo.log - secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
runas_list: host_list:
root: '!set_logname' www1: log_year, logfile=/var/log/sudo.log
user_list: runas_list:
ADMINS: '!lecture' root: '!set_logname'
johndoe: '!requiretty' user_list:
execprefix: /usr/sbin ADMINS: '!lecture'
group: root johndoe: '!requiretty'
groups: execprefix: /usr/sbin
sudo: group: root
- ALL=(ALL) ALL
- 'ALL=(nodejs) NOPASSWD: ALL'
included_files:
/etc/sudoers.d/extra-file:
users:
foo:
- ALL=(ALL) ALL
extra-file-2:
groups: groups:
bargroup: sudo:
- 'ALL=(ALL) NOPASSWD: ALL'
extra-file-3:
netgroups:
other_netgroup:
- ALL=(ALL) ALL - ALL=(ALL) ALL
includedir: /etc/sudoers.d - 'ALL=(nodejs) NOPASSWD: ALL'
manage_main_config: true included_files:
netgroups: /etc/sudoers.d/extra-file:
sysadmins: users:
- ALL=(ALL) ALL foo:
pkg: sudo - ALL=(ALL) ALL
purge_includedir: false extra-file-2:
users: groups:
johndoe: bargroup:
- ALL=(ALL) ALL - 'ALL=(ALL) NOPASSWD: ALL'
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd' extra-file-3:
kitchen: netgroups:
- 'ALL=(root) NOPASSWD: ALL' other_netgroup:
- ALL=(ALL) ALL
includedir: /etc/sudoers.d
manage_main_config: true
netgroups:
sysadmins:
- ALL=(ALL) ALL
pkg: sudo
purge_includedir: false
users:
johndoe:
- ALL=(ALL) ALL
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd'
kitchen:
- 'ALL=(root) NOPASSWD: ALL'

130
test/integration/default/files/_mapdata/centos-6.yaml
View file

@ -1,69 +1,71 @@
# yamllint disable rule:indentation rule:line-length # yamllint disable rule:indentation rule:line-length
# CentOS-6 # CentOS-6
--- ---
aliases: values:
commands: sudoers:
PROCESSES: aliases:
- /usr/bin/nice commands:
- /bin/kill PROCESSES:
- /usr/bin/renice - /usr/bin/nice
- /usr/bin/pkill - /bin/kill
- /usr/bin/top - /usr/bin/renice
hosts: - /usr/bin/pkill
WEBSERVERS: - /usr/bin/top
- www1 hosts:
- www2 WEBSERVERS:
- www3 - www1
users: - www2
ADMINS: - www3
- millert users:
- dowdy ADMINS:
- mikef - millert
arch: amd64 - dowdy
configpath: /etc - mikef
defaults: arch: amd64
command_list: configpath: /etc
PROCESSES: noexec defaults:
generic: command_list:
- env_reset PROCESSES: noexec
- mail_badpass generic:
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - env_reset
host_list: - mail_badpass
www1: log_year, logfile=/var/log/sudo.log - secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
runas_list: host_list:
root: '!set_logname' www1: log_year, logfile=/var/log/sudo.log
user_list: runas_list:
ADMINS: '!lecture' root: '!set_logname'
johndoe: '!requiretty' user_list:
execprefix: /usr/sbin ADMINS: '!lecture'
group: root johndoe: '!requiretty'
groups: execprefix: /usr/sbin
sudo: group: root
- ALL=(ALL) ALL
- 'ALL=(nodejs) NOPASSWD: ALL'
included_files:
/etc/sudoers.d/extra-file:
users:
foo:
- ALL=(ALL) ALL
extra-file-2:
groups: groups:
bargroup: sudo:
- 'ALL=(ALL) NOPASSWD: ALL'
extra-file-3:
netgroups:
other_netgroup:
- ALL=(ALL) ALL - ALL=(ALL) ALL
includedir: /etc/sudoers.d - 'ALL=(nodejs) NOPASSWD: ALL'
manage_main_config: true included_files:
netgroups: /etc/sudoers.d/extra-file:
sysadmins: users:
- ALL=(ALL) ALL foo:
pkg: sudo - ALL=(ALL) ALL
purge_includedir: false extra-file-2:
users: groups:
johndoe: bargroup:
- ALL=(ALL) ALL - 'ALL=(ALL) NOPASSWD: ALL'
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd' extra-file-3:
kitchen: netgroups:
- 'ALL=(root) NOPASSWD: ALL' other_netgroup:
- ALL=(ALL) ALL
includedir: /etc/sudoers.d
manage_main_config: true
netgroups:
sysadmins:
- ALL=(ALL) ALL
pkg: sudo
purge_includedir: false
users:
johndoe:
- ALL=(ALL) ALL
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd'
kitchen:
- 'ALL=(root) NOPASSWD: ALL'

130
test/integration/default/files/_mapdata/centos-7.yaml
View file

@ -1,69 +1,71 @@
# yamllint disable rule:indentation rule:line-length # yamllint disable rule:indentation rule:line-length
# CentOS Linux-7 # CentOS Linux-7
--- ---
aliases: values:
commands: sudoers:
PROCESSES: aliases:
- /usr/bin/nice commands:
- /bin/kill PROCESSES:
- /usr/bin/renice - /usr/bin/nice
- /usr/bin/pkill - /bin/kill
- /usr/bin/top - /usr/bin/renice
hosts: - /usr/bin/pkill
WEBSERVERS: - /usr/bin/top
- www1 hosts:
- www2 WEBSERVERS:
- www3 - www1
users: - www2
ADMINS: - www3
- millert users:
- dowdy ADMINS:
- mikef - millert
arch: amd64 - dowdy
configpath: /etc - mikef
defaults: arch: amd64
command_list: configpath: /etc
PROCESSES: noexec defaults:
generic: command_list:
- env_reset PROCESSES: noexec
- mail_badpass generic:
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - env_reset
host_list: - mail_badpass
www1: log_year, logfile=/var/log/sudo.log - secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
runas_list: host_list:
root: '!set_logname' www1: log_year, logfile=/var/log/sudo.log
user_list: runas_list:
ADMINS: '!lecture' root: '!set_logname'
johndoe: '!requiretty' user_list:
execprefix: /usr/sbin ADMINS: '!lecture'
group: root johndoe: '!requiretty'
groups: execprefix: /usr/sbin
sudo: group: root
- ALL=(ALL) ALL
- 'ALL=(nodejs) NOPASSWD: ALL'
included_files:
/etc/sudoers.d/extra-file:
users:
foo:
- ALL=(ALL) ALL
extra-file-2:
groups: groups:
bargroup: sudo:
- 'ALL=(ALL) NOPASSWD: ALL'
extra-file-3:
netgroups:
other_netgroup:
- ALL=(ALL) ALL - ALL=(ALL) ALL
includedir: /etc/sudoers.d - 'ALL=(nodejs) NOPASSWD: ALL'
manage_main_config: true included_files:
netgroups: /etc/sudoers.d/extra-file:
sysadmins: users:
- ALL=(ALL) ALL foo:
pkg: sudo - ALL=(ALL) ALL
purge_includedir: false extra-file-2:
users: groups:
johndoe: bargroup:
- ALL=(ALL) ALL - 'ALL=(ALL) NOPASSWD: ALL'
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd' extra-file-3:
kitchen: netgroups:
- 'ALL=(root) NOPASSWD: ALL' other_netgroup:
- ALL=(ALL) ALL
includedir: /etc/sudoers.d
manage_main_config: true
netgroups:
sysadmins:
- ALL=(ALL) ALL
pkg: sudo
purge_includedir: false
users:
johndoe:
- ALL=(ALL) ALL
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd'
kitchen:
- 'ALL=(root) NOPASSWD: ALL'

130
test/integration/default/files/_mapdata/centos-8.yaml
View file

@ -1,69 +1,71 @@
# yamllint disable rule:indentation rule:line-length # yamllint disable rule:indentation rule:line-length
# CentOS Linux-8 # CentOS Linux-8
--- ---
aliases: values:
commands: sudoers:
PROCESSES: aliases:
- /usr/bin/nice commands:
- /bin/kill PROCESSES:
- /usr/bin/renice - /usr/bin/nice
- /usr/bin/pkill - /bin/kill
- /usr/bin/top - /usr/bin/renice
hosts: - /usr/bin/pkill
WEBSERVERS: - /usr/bin/top
- www1 hosts:
- www2 WEBSERVERS:
- www3 - www1
users: - www2
ADMINS: - www3
- millert users:
- dowdy ADMINS:
- mikef - millert
arch: amd64 - dowdy
configpath: /etc - mikef
defaults: arch: amd64
command_list: configpath: /etc
PROCESSES: noexec defaults:
generic: command_list:
- env_reset PROCESSES: noexec
- mail_badpass generic:
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - env_reset
host_list: - mail_badpass
www1: log_year, logfile=/var/log/sudo.log - secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
runas_list: host_list:
root: '!set_logname' www1: log_year, logfile=/var/log/sudo.log
user_list: runas_list:
ADMINS: '!lecture' root: '!set_logname'
johndoe: '!requiretty' user_list:
execprefix: /usr/sbin ADMINS: '!lecture'
group: root johndoe: '!requiretty'
groups: execprefix: /usr/sbin
sudo: group: root
- ALL=(ALL) ALL
- 'ALL=(nodejs) NOPASSWD: ALL'
included_files:
/etc/sudoers.d/extra-file:
users:
foo:
- ALL=(ALL) ALL
extra-file-2:
groups: groups:
bargroup: sudo:
- 'ALL=(ALL) NOPASSWD: ALL'
extra-file-3:
netgroups:
other_netgroup:
- ALL=(ALL) ALL - ALL=(ALL) ALL
includedir: /etc/sudoers.d - 'ALL=(nodejs) NOPASSWD: ALL'
manage_main_config: true included_files:
netgroups: /etc/sudoers.d/extra-file:
sysadmins: users:
- ALL=(ALL) ALL foo:
pkg: sudo - ALL=(ALL) ALL
purge_includedir: false extra-file-2:
users: groups:
johndoe: bargroup:
- ALL=(ALL) ALL - 'ALL=(ALL) NOPASSWD: ALL'
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd' extra-file-3:
kitchen: netgroups:
- 'ALL=(root) NOPASSWD: ALL' other_netgroup:
- ALL=(ALL) ALL
includedir: /etc/sudoers.d
manage_main_config: true
netgroups:
sysadmins:
- ALL=(ALL) ALL
pkg: sudo
purge_includedir: false
users:
johndoe:
- ALL=(ALL) ALL
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd'
kitchen:
- 'ALL=(root) NOPASSWD: ALL'

130
test/integration/default/files/_mapdata/debian-10.yaml
View file

@ -1,69 +1,71 @@
# yamllint disable rule:indentation rule:line-length # yamllint disable rule:indentation rule:line-length
# Debian-10 # Debian-10
--- ---
aliases: values:
commands: sudoers:
PROCESSES: aliases:
- /usr/bin/nice commands:
- /bin/kill PROCESSES:
- /usr/bin/renice - /usr/bin/nice
- /usr/bin/pkill - /bin/kill
- /usr/bin/top - /usr/bin/renice
hosts: - /usr/bin/pkill
WEBSERVERS: - /usr/bin/top
- www1 hosts:
- www2 WEBSERVERS:
- www3 - www1
users: - www2
ADMINS: - www3
- millert users:
- dowdy ADMINS:
- mikef - millert
arch: amd64 - dowdy
configpath: /etc - mikef
defaults: arch: amd64
command_list: configpath: /etc
PROCESSES: noexec defaults:
generic: command_list:
- env_reset PROCESSES: noexec
- mail_badpass generic:
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - env_reset
host_list: - mail_badpass
www1: log_year, logfile=/var/log/sudo.log - secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
runas_list: host_list:
root: '!set_logname' www1: log_year, logfile=/var/log/sudo.log
user_list: runas_list:
ADMINS: '!lecture' root: '!set_logname'
johndoe: '!requiretty' user_list:
execprefix: /usr/sbin ADMINS: '!lecture'
group: root johndoe: '!requiretty'
groups: execprefix: /usr/sbin
sudo: group: root
- ALL=(ALL) ALL
- 'ALL=(nodejs) NOPASSWD: ALL'
included_files:
/etc/sudoers.d/extra-file:
users:
foo:
- ALL=(ALL) ALL
extra-file-2:
groups: groups:
bargroup: sudo:
- 'ALL=(ALL) NOPASSWD: ALL'
extra-file-3:
netgroups:
other_netgroup:
- ALL=(ALL) ALL - ALL=(ALL) ALL
includedir: /etc/sudoers.d - 'ALL=(nodejs) NOPASSWD: ALL'
manage_main_config: true included_files:
netgroups: /etc/sudoers.d/extra-file:
sysadmins: users:
- ALL=(ALL) ALL foo:
pkg: sudo - ALL=(ALL) ALL
purge_includedir: false extra-file-2:
users: groups:
johndoe: bargroup:
- ALL=(ALL) ALL - 'ALL=(ALL) NOPASSWD: ALL'
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd' extra-file-3:
kitchen: netgroups:
- 'ALL=(root) NOPASSWD: ALL' other_netgroup:
- ALL=(ALL) ALL
includedir: /etc/sudoers.d
manage_main_config: true
netgroups:
sysadmins:
- ALL=(ALL) ALL
pkg: sudo
purge_includedir: false
users:
johndoe:
- ALL=(ALL) ALL
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd'
kitchen:
- 'ALL=(root) NOPASSWD: ALL'

130
test/integration/default/files/_mapdata/debian-9.yaml
View file

@ -1,69 +1,71 @@
# yamllint disable rule:indentation rule:line-length # yamllint disable rule:indentation rule:line-length
# Debian-9 # Debian-9
--- ---
aliases: values:
commands: sudoers:
PROCESSES: aliases:
- /usr/bin/nice commands:
- /bin/kill PROCESSES:
- /usr/bin/renice - /usr/bin/nice
- /usr/bin/pkill - /bin/kill
- /usr/bin/top - /usr/bin/renice
hosts: - /usr/bin/pkill
WEBSERVERS: - /usr/bin/top
- www1 hosts:
- www2 WEBSERVERS:
- www3 - www1
users: - www2
ADMINS: - www3
- millert users:
- dowdy ADMINS:
- mikef - millert
arch: amd64 - dowdy
configpath: /etc - mikef
defaults: arch: amd64
command_list: configpath: /etc
PROCESSES: noexec defaults:
generic: command_list:
- env_reset PROCESSES: noexec
- mail_badpass generic:
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - env_reset
host_list: - mail_badpass
www1: log_year, logfile=/var/log/sudo.log - secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
runas_list: host_list:
root: '!set_logname' www1: log_year, logfile=/var/log/sudo.log
user_list: runas_list:
ADMINS: '!lecture' root: '!set_logname'
johndoe: '!requiretty' user_list:
execprefix: /usr/sbin ADMINS: '!lecture'
group: root johndoe: '!requiretty'
groups: execprefix: /usr/sbin
sudo: group: root
- ALL=(ALL) ALL
- 'ALL=(nodejs) NOPASSWD: ALL'
included_files:
/etc/sudoers.d/extra-file:
users:
foo:
- ALL=(ALL) ALL
extra-file-2:
groups: groups:
bargroup: sudo:
- 'ALL=(ALL) NOPASSWD: ALL'
extra-file-3:
netgroups:
other_netgroup:
- ALL=(ALL) ALL - ALL=(ALL) ALL
includedir: /etc/sudoers.d - 'ALL=(nodejs) NOPASSWD: ALL'
manage_main_config: true included_files:
netgroups: /etc/sudoers.d/extra-file:
sysadmins: users:
- ALL=(ALL) ALL foo:
pkg: sudo - ALL=(ALL) ALL
purge_includedir: false extra-file-2:
users: groups:
johndoe: bargroup:
- ALL=(ALL) ALL - 'ALL=(ALL) NOPASSWD: ALL'
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd' extra-file-3:
kitchen: netgroups:
- 'ALL=(root) NOPASSWD: ALL' other_netgroup:
- ALL=(ALL) ALL
includedir: /etc/sudoers.d
manage_main_config: true
netgroups:
sysadmins:
- ALL=(ALL) ALL
pkg: sudo
purge_includedir: false
users:
johndoe:
- ALL=(ALL) ALL
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd'
kitchen:
- 'ALL=(root) NOPASSWD: ALL'

130
test/integration/default/files/_mapdata/fedora-31.yaml
View file

@ -1,69 +1,71 @@
# yamllint disable rule:indentation rule:line-length # yamllint disable rule:indentation rule:line-length
# Fedora-31 # Fedora-31
--- ---
aliases: values:
commands: sudoers:
PROCESSES: aliases:
- /usr/bin/nice commands:
- /bin/kill PROCESSES:
- /usr/bin/renice - /usr/bin/nice
- /usr/bin/pkill - /bin/kill
- /usr/bin/top - /usr/bin/renice
hosts: - /usr/bin/pkill
WEBSERVERS: - /usr/bin/top
- www1 hosts:
- www2 WEBSERVERS:
- www3 - www1
users: - www2
ADMINS: - www3
- millert users:
- dowdy ADMINS:
- mikef - millert
arch: amd64 - dowdy
configpath: /etc - mikef
defaults: arch: amd64
command_list: configpath: /etc
PROCESSES: noexec defaults:
generic: command_list:
- env_reset PROCESSES: noexec
- mail_badpass generic:
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - env_reset
host_list: - mail_badpass
www1: log_year, logfile=/var/log/sudo.log - secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
runas_list: host_list:
root: '!set_logname' www1: log_year, logfile=/var/log/sudo.log
user_list: runas_list:
ADMINS: '!lecture' root: '!set_logname'
johndoe: '!requiretty' user_list:
execprefix: /usr/sbin ADMINS: '!lecture'
group: root johndoe: '!requiretty'
groups: execprefix: /usr/sbin
sudo: group: root
- ALL=(ALL) ALL
- 'ALL=(nodejs) NOPASSWD: ALL'
included_files:
/etc/sudoers.d/extra-file:
users:
foo:
- ALL=(ALL) ALL
extra-file-2:
groups: groups:
bargroup: sudo:
- 'ALL=(ALL) NOPASSWD: ALL'
extra-file-3:
netgroups:
other_netgroup:
- ALL=(ALL) ALL - ALL=(ALL) ALL
includedir: /etc/sudoers.d - 'ALL=(nodejs) NOPASSWD: ALL'
manage_main_config: true included_files:
netgroups: /etc/sudoers.d/extra-file:
sysadmins: users:
- ALL=(ALL) ALL foo:
pkg: sudo - ALL=(ALL) ALL
purge_includedir: false extra-file-2:
users: groups:
johndoe: bargroup:
- ALL=(ALL) ALL - 'ALL=(ALL) NOPASSWD: ALL'
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd' extra-file-3:
kitchen: netgroups:
- 'ALL=(root) NOPASSWD: ALL' other_netgroup:
- ALL=(ALL) ALL
includedir: /etc/sudoers.d
manage_main_config: true
netgroups:
sysadmins:
- ALL=(ALL) ALL
pkg: sudo
purge_includedir: false
users:
johndoe:
- ALL=(ALL) ALL
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd'
kitchen:
- 'ALL=(root) NOPASSWD: ALL'

130
test/integration/default/files/_mapdata/fedora-32.yaml
View file

@ -1,69 +1,71 @@
# yamllint disable rule:indentation rule:line-length # yamllint disable rule:indentation rule:line-length
# Fedora-32 # Fedora-32
--- ---
aliases: values:
commands: sudoers:
PROCESSES: aliases:
- /usr/bin/nice commands:
- /bin/kill PROCESSES:
- /usr/bin/renice - /usr/bin/nice
- /usr/bin/pkill - /bin/kill
- /usr/bin/top - /usr/bin/renice
hosts: - /usr/bin/pkill
WEBSERVERS: - /usr/bin/top
- www1 hosts:
- www2 WEBSERVERS:
- www3 - www1
users: - www2
ADMINS: - www3
- millert users:
- dowdy ADMINS:
- mikef - millert
arch: amd64 - dowdy
configpath: /etc - mikef
defaults: arch: amd64
command_list: configpath: /etc
PROCESSES: noexec defaults:
generic: command_list:
- env_reset PROCESSES: noexec
- mail_badpass generic:
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - env_reset
host_list: - mail_badpass
www1: log_year, logfile=/var/log/sudo.log - secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
runas_list: host_list:
root: '!set_logname' www1: log_year, logfile=/var/log/sudo.log
user_list: runas_list:
ADMINS: '!lecture' root: '!set_logname'
johndoe: '!requiretty' user_list:
execprefix: /usr/sbin ADMINS: '!lecture'
group: root johndoe: '!requiretty'
groups: execprefix: /usr/sbin
sudo: group: root
- ALL=(ALL) ALL
- 'ALL=(nodejs) NOPASSWD: ALL'
included_files:
/etc/sudoers.d/extra-file:
users:
foo:
- ALL=(ALL) ALL
extra-file-2:
groups: groups:
bargroup: sudo:
- 'ALL=(ALL) NOPASSWD: ALL'
extra-file-3:
netgroups:
other_netgroup:
- ALL=(ALL) ALL - ALL=(ALL) ALL
includedir: /etc/sudoers.d - 'ALL=(nodejs) NOPASSWD: ALL'
manage_main_config: true included_files:
netgroups: /etc/sudoers.d/extra-file:
sysadmins: users:
- ALL=(ALL) ALL foo:
pkg: sudo - ALL=(ALL) ALL
purge_includedir: false extra-file-2:
users: groups:
johndoe: bargroup:
- ALL=(ALL) ALL - 'ALL=(ALL) NOPASSWD: ALL'
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd' extra-file-3:
kitchen: netgroups:
- 'ALL=(root) NOPASSWD: ALL' other_netgroup:
- ALL=(ALL) ALL
includedir: /etc/sudoers.d
manage_main_config: true
netgroups:
sysadmins:
- ALL=(ALL) ALL
pkg: sudo
purge_includedir: false
users:
johndoe:
- ALL=(ALL) ALL
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd'
kitchen:
- 'ALL=(root) NOPASSWD: ALL'

130
test/integration/default/files/_mapdata/opensuse-15.yaml
View file

@ -1,69 +1,71 @@
# yamllint disable rule:indentation rule:line-length # yamllint disable rule:indentation rule:line-length
# Leap-15 # Leap-15
--- ---
aliases: values:
commands: sudoers:
PROCESSES: aliases:
- /usr/bin/nice commands:
- /bin/kill PROCESSES:
- /usr/bin/renice - /usr/bin/nice
- /usr/bin/pkill - /bin/kill
- /usr/bin/top - /usr/bin/renice
hosts: - /usr/bin/pkill
WEBSERVERS: - /usr/bin/top
- www1 hosts:
- www2 WEBSERVERS:
- www3 - www1
users: - www2
ADMINS: - www3
- millert users:
- dowdy ADMINS:
- mikef - millert
arch: amd64 - dowdy
configpath: /etc - mikef
defaults: arch: amd64
command_list: configpath: /etc
PROCESSES: noexec defaults:
generic: command_list:
- env_reset PROCESSES: noexec
- mail_badpass generic:
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - env_reset
host_list: - mail_badpass
www1: log_year, logfile=/var/log/sudo.log - secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
runas_list: host_list:
root: '!set_logname' www1: log_year, logfile=/var/log/sudo.log
user_list: runas_list:
ADMINS: '!lecture' root: '!set_logname'
johndoe: '!requiretty' user_list:
execprefix: /usr/sbin ADMINS: '!lecture'
group: root johndoe: '!requiretty'
groups: execprefix: /usr/sbin
sudo: group: root
- ALL=(ALL) ALL
- 'ALL=(nodejs) NOPASSWD: ALL'
included_files:
/etc/sudoers.d/extra-file:
users:
foo:
- ALL=(ALL) ALL
extra-file-2:
groups: groups:
bargroup: sudo:
- 'ALL=(ALL) NOPASSWD: ALL'
extra-file-3:
netgroups:
other_netgroup:
- ALL=(ALL) ALL - ALL=(ALL) ALL
includedir: /etc/sudoers.d - 'ALL=(nodejs) NOPASSWD: ALL'
manage_main_config: true included_files:
netgroups: /etc/sudoers.d/extra-file:
sysadmins: users:
- ALL=(ALL) ALL foo:
pkg: sudo - ALL=(ALL) ALL
purge_includedir: false extra-file-2:
users: groups:
johndoe: bargroup:
- ALL=(ALL) ALL - 'ALL=(ALL) NOPASSWD: ALL'
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd' extra-file-3:
kitchen: netgroups:
- 'ALL=(root) NOPASSWD: ALL' other_netgroup:
- ALL=(ALL) ALL
includedir: /etc/sudoers.d
manage_main_config: true
netgroups:
sysadmins:
- ALL=(ALL) ALL
pkg: sudo
purge_includedir: false
users:
johndoe:
- ALL=(ALL) ALL
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd'
kitchen:
- 'ALL=(root) NOPASSWD: ALL'

130
test/integration/default/files/_mapdata/ubuntu-16.yaml
View file

@ -1,69 +1,71 @@
# yamllint disable rule:indentation rule:line-length # yamllint disable rule:indentation rule:line-length
# Ubuntu-16.04 # Ubuntu-16.04
--- ---
aliases: values:
commands: sudoers:
PROCESSES: aliases:
- /usr/bin/nice commands:
- /bin/kill PROCESSES:
- /usr/bin/renice - /usr/bin/nice
- /usr/bin/pkill - /bin/kill
- /usr/bin/top - /usr/bin/renice
hosts: - /usr/bin/pkill
WEBSERVERS: - /usr/bin/top
- www1 hosts:
- www2 WEBSERVERS:
- www3 - www1
users: - www2
ADMINS: - www3
- millert users:
- dowdy ADMINS:
- mikef - millert
arch: amd64 - dowdy
configpath: /etc - mikef
defaults: arch: amd64
command_list: configpath: /etc
PROCESSES: noexec defaults:
generic: command_list:
- env_reset PROCESSES: noexec
- mail_badpass generic:
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - env_reset
host_list: - mail_badpass
www1: log_year, logfile=/var/log/sudo.log - secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
runas_list: host_list:
root: '!set_logname' www1: log_year, logfile=/var/log/sudo.log
user_list: runas_list:
ADMINS: '!lecture' root: '!set_logname'
johndoe: '!requiretty' user_list:
execprefix: /usr/sbin ADMINS: '!lecture'
group: root johndoe: '!requiretty'
groups: execprefix: /usr/sbin
sudo: group: root
- ALL=(ALL) ALL
- 'ALL=(nodejs) NOPASSWD: ALL'
included_files:
/etc/sudoers.d/extra-file:
users:
foo:
- ALL=(ALL) ALL
extra-file-2:
groups: groups:
bargroup: sudo:
- 'ALL=(ALL) NOPASSWD: ALL'
extra-file-3:
netgroups:
other_netgroup:
- ALL=(ALL) ALL - ALL=(ALL) ALL
includedir: /etc/sudoers.d - 'ALL=(nodejs) NOPASSWD: ALL'
manage_main_config: true included_files:
netgroups: /etc/sudoers.d/extra-file:
sysadmins: users:
- ALL=(ALL) ALL foo:
pkg: sudo - ALL=(ALL) ALL
purge_includedir: false extra-file-2:
users: groups:
johndoe: bargroup:
- ALL=(ALL) ALL - 'ALL=(ALL) NOPASSWD: ALL'
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd' extra-file-3:
kitchen: netgroups:
- 'ALL=(root) NOPASSWD: ALL' other_netgroup:
- ALL=(ALL) ALL
includedir: /etc/sudoers.d
manage_main_config: true
netgroups:
sysadmins:
- ALL=(ALL) ALL
pkg: sudo
purge_includedir: false
users:
johndoe:
- ALL=(ALL) ALL
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd'
kitchen:
- 'ALL=(root) NOPASSWD: ALL'

130
test/integration/default/files/_mapdata/ubuntu-18.yaml
View file

@ -1,69 +1,71 @@
# yamllint disable rule:indentation rule:line-length # yamllint disable rule:indentation rule:line-length
# Ubuntu-18.04 # Ubuntu-18.04
--- ---
aliases: values:
commands: sudoers:
PROCESSES: aliases:
- /usr/bin/nice commands:
- /bin/kill PROCESSES:
- /usr/bin/renice - /usr/bin/nice
- /usr/bin/pkill - /bin/kill
- /usr/bin/top - /usr/bin/renice
hosts: - /usr/bin/pkill
WEBSERVERS: - /usr/bin/top
- www1 hosts:
- www2 WEBSERVERS:
- www3 - www1
users: - www2
ADMINS: - www3
- millert users:
- dowdy ADMINS:
- mikef - millert
arch: amd64 - dowdy
configpath: /etc - mikef
defaults: arch: amd64
command_list: configpath: /etc
PROCESSES: noexec defaults:
generic: command_list:
- env_reset PROCESSES: noexec
- mail_badpass generic:
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - env_reset
host_list: - mail_badpass
www1: log_year, logfile=/var/log/sudo.log - secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
runas_list: host_list:
root: '!set_logname' www1: log_year, logfile=/var/log/sudo.log
user_list: runas_list:
ADMINS: '!lecture' root: '!set_logname'
johndoe: '!requiretty' user_list:
execprefix: /usr/sbin ADMINS: '!lecture'
group: root johndoe: '!requiretty'
groups: execprefix: /usr/sbin
sudo: group: root
- ALL=(ALL) ALL
- 'ALL=(nodejs) NOPASSWD: ALL'
included_files:
/etc/sudoers.d/extra-file:
users:
foo:
- ALL=(ALL) ALL
extra-file-2:
groups: groups:
bargroup: sudo:
- 'ALL=(ALL) NOPASSWD: ALL'
extra-file-3:
netgroups:
other_netgroup:
- ALL=(ALL) ALL - ALL=(ALL) ALL
includedir: /etc/sudoers.d - 'ALL=(nodejs) NOPASSWD: ALL'
manage_main_config: true included_files:
netgroups: /etc/sudoers.d/extra-file:
sysadmins: users:
- ALL=(ALL) ALL foo:
pkg: sudo - ALL=(ALL) ALL
purge_includedir: false extra-file-2:
users: groups:
johndoe: bargroup:
- ALL=(ALL) ALL - 'ALL=(ALL) NOPASSWD: ALL'
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd' extra-file-3:
kitchen: netgroups:
- 'ALL=(root) NOPASSWD: ALL' other_netgroup:
- ALL=(ALL) ALL
includedir: /etc/sudoers.d
manage_main_config: true
netgroups:
sysadmins:
- ALL=(ALL) ALL
pkg: sudo
purge_includedir: false
users:
johndoe:
- ALL=(ALL) ALL
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd'
kitchen:
- 'ALL=(root) NOPASSWD: ALL'

130
test/integration/default/files/_mapdata/ubuntu-20.yaml
View file

@ -1,69 +1,71 @@
# yamllint disable rule:indentation rule:line-length # yamllint disable rule:indentation rule:line-length
# Ubuntu-20.04 # Ubuntu-20.04
--- ---
aliases: values:
commands: sudoers:
PROCESSES: aliases:
- /usr/bin/nice commands:
- /bin/kill PROCESSES:
- /usr/bin/renice - /usr/bin/nice
- /usr/bin/pkill - /bin/kill
- /usr/bin/top - /usr/bin/renice
hosts: - /usr/bin/pkill
WEBSERVERS: - /usr/bin/top
- www1 hosts:
- www2 WEBSERVERS:
- www3 - www1
users: - www2
ADMINS: - www3
- millert users:
- dowdy ADMINS:
- mikef - millert
arch: amd64 - dowdy
configpath: /etc - mikef
defaults: arch: amd64
command_list: configpath: /etc
PROCESSES: noexec defaults:
generic: command_list:
- env_reset PROCESSES: noexec
- mail_badpass generic:
- secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - env_reset
host_list: - mail_badpass
www1: log_year, logfile=/var/log/sudo.log - secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
runas_list: host_list:
root: '!set_logname' www1: log_year, logfile=/var/log/sudo.log
user_list: runas_list:
ADMINS: '!lecture' root: '!set_logname'
johndoe: '!requiretty' user_list:
execprefix: /usr/sbin ADMINS: '!lecture'
group: root johndoe: '!requiretty'
groups: execprefix: /usr/sbin
sudo: group: root
- ALL=(ALL) ALL
- 'ALL=(nodejs) NOPASSWD: ALL'
included_files:
/etc/sudoers.d/extra-file:
users:
foo:
- ALL=(ALL) ALL
extra-file-2:
groups: groups:
bargroup: sudo:
- 'ALL=(ALL) NOPASSWD: ALL'
extra-file-3:
netgroups:
other_netgroup:
- ALL=(ALL) ALL - ALL=(ALL) ALL
includedir: /etc/sudoers.d - 'ALL=(nodejs) NOPASSWD: ALL'
manage_main_config: true included_files:
netgroups: /etc/sudoers.d/extra-file:
sysadmins: users:
- ALL=(ALL) ALL foo:
pkg: sudo - ALL=(ALL) ALL
purge_includedir: false extra-file-2:
users: groups:
johndoe: bargroup:
- ALL=(ALL) ALL - 'ALL=(ALL) NOPASSWD: ALL'
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd' extra-file-3:
kitchen: netgroups:
- 'ALL=(root) NOPASSWD: ALL' other_netgroup:
- ALL=(ALL) ALL
includedir: /etc/sudoers.d
manage_main_config: true
netgroups:
sysadmins:
- ALL=(ALL) ALL
pkg: sudo
purge_includedir: false
users:
johndoe:
- ALL=(ALL) ALL
- 'ALL=(root) NOPASSWD: /etc/init.d/httpd'
kitchen:
- 'ALL=(root) NOPASSWD: ALL'