diff options
| author | Sam Yaple <sam@yaple.net> | 2016-12-18 20:48:27 +0000 |
|---|---|---|
| committer | Sam Yaple <sam@yaple.net> | 2016-12-18 20:48:27 +0000 |
| commit | 73681e760723e899252bd814745ea891c757b7c6 (patch) | |
| tree | 27da5450eae950290b141bb05d4b9c1004d44962 | |
| parent | 26fb747b0a6ecf63fcb003836d80799779e6b50e (diff) | |
| download | kolla-73681e760723e899252bd814745ea891c757b7c6.tar.gz kolla-73681e760723e899252bd814745ea891c757b7c6.zip | |
Remove /usr/bin/install from allowed commands
This essentially allows the user to copy any files and set any
ownership on any files. Can be used to do anything on the system and
all users in 'kolla' group have access to it.
Change-Id: I9d6cd2b4ca40cb536484fa45e80692105b5fa2a4
| -rw-r--r-- | docker/base/sudoers | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/docker/base/sudoers b/docker/base/sudoers index 974f36a29..76baefcb0 100644 --- a/docker/base/sudoers +++ b/docker/base/sudoers @@ -13,6 +13,6 @@ root ALL=(ALL) ALL # anyone in the kolla group may run /usr/local/bin/kolla_set_configs as the # root user via sudo without password confirmation -%kolla ALL=(root) NOPASSWD: /usr/local/bin/kolla_set_configs, /usr/bin/install +%kolla ALL=(root) NOPASSWD: /usr/local/bin/kolla_set_configs #includedir /etc/sudoers.d |