From 29892cd76ed0380e0c1e328f40938079ee5e6388 Mon Sep 17 00:00:00 2001 From: Francisco Redondo Marchena Date: Tue, 17 Feb 2015 15:00:30 +0000 Subject: Disable login requirement for sudo for cinder, nova and neutron users Requiredtty is dissable by default but just in case we enable it in the future for the rest of the users, cinder, nova and neutron needs login disable to run commands being superuser. --- strata/openstack-services/cinder.morph | 2 ++ 1 file changed, 2 insertions(+) (limited to 'strata/openstack-services/cinder.morph') diff --git a/strata/openstack-services/cinder.morph b/strata/openstack-services/cinder.morph index eafc7cea..cd680b09 100644 --- a/strata/openstack-services/cinder.morph +++ b/strata/openstack-services/cinder.morph @@ -12,5 +12,7 @@ post-install-commands: - mkdir -p "$DESTDIR"/etc/sudoers.d - | install -D -m 0440 /proc/self/fd/0 <<'EOF' "$DESTDIR"/etc/sudoers.d/cinder-rootwrap + Defaults:cinder !requiretty + cinder ALL=(root) NOPASSWD: /usr/bin/cinder-rootwrap /etc/cinder/rootwrap.conf * EOF -- cgit v1.2.1