diff options
| author | Zuul <zuul@review.opendev.org> | 2022-09-06 11:59:30 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2022-09-06 11:59:30 +0000 |
| commit | 2a4a8fce31c12114e8f472c24dd96864b5bd2bd2 (patch) | |
| tree | 9288ed91a0e4efdab2ba9548d693c6eaf14a8539 /docker/base/sudoers | |
| parent | 2c2dc39b3bb39a27e6f94dbd797c9406bf512109 (diff) | |
| parent | 5b1da017988c987fc68b55d1f45b5d2676474ce1 (diff) | |
| download | kolla-2a4a8fce31c12114e8f472c24dd96864b5bd2bd2.tar.gz kolla-2a4a8fce31c12114e8f472c24dd96864b5bd2bd2.zip | |
Merge "Fix CVE-2022-38060"
Diffstat (limited to 'docker/base/sudoers')
| -rw-r--r-- | docker/base/sudoers | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/docker/base/sudoers b/docker/base/sudoers index da9c04c30..9b2bfb8dc 100644 --- a/docker/base/sudoers +++ b/docker/base/sudoers @@ -6,6 +6,8 @@ # anyone in the kolla group may sudo -E (set the environment) Defaults: %kolla setenv +Defaults secure_path="/var/lib/kolla/venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" + # root may run any commands via sudo as the network seervice user. This is # neededfor database migrations of existing services which have not been # converted to run as a non-root user, but instead do that via sudo -E glance |