diff options
| author | Sam Yaple <sam@yaple.net> | 2016-12-18 20:48:27 +0000 |
|---|---|---|
| committer | Sam Yaple <sam@yaple.net> | 2016-12-18 20:48:27 +0000 |
| commit | 73681e760723e899252bd814745ea891c757b7c6 (patch) | |
| tree | 27da5450eae950290b141bb05d4b9c1004d44962 /docker | |
| parent | 26fb747b0a6ecf63fcb003836d80799779e6b50e (diff) | |
| download | kolla-73681e760723e899252bd814745ea891c757b7c6.tar.gz kolla-73681e760723e899252bd814745ea891c757b7c6.zip | |
Remove /usr/bin/install from allowed commands
This essentially allows the user to copy any files and set any
ownership on any files. Can be used to do anything on the system and
all users in 'kolla' group have access to it.
Change-Id: I9d6cd2b4ca40cb536484fa45e80692105b5fa2a4
Diffstat (limited to 'docker')
| -rw-r--r-- | docker/base/sudoers | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/docker/base/sudoers b/docker/base/sudoers index 974f36a29..76baefcb0 100644 --- a/docker/base/sudoers +++ b/docker/base/sudoers @@ -13,6 +13,6 @@ root ALL=(ALL) ALL # anyone in the kolla group may run /usr/local/bin/kolla_set_configs as the # root user via sudo without password confirmation -%kolla ALL=(root) NOPASSWD: /usr/local/bin/kolla_set_configs, /usr/bin/install +%kolla ALL=(root) NOPASSWD: /usr/local/bin/kolla_set_configs #includedir /etc/sudoers.d |