From 29892cd76ed0380e0c1e328f40938079ee5e6388 Mon Sep 17 00:00:00 2001 From: Francisco Redondo Marchena Date: Tue, 17 Feb 2015 15:00:30 +0000 Subject: Disable login requirement for sudo for cinder, nova and neutron users Requiredtty is dissable by default but just in case we enable it in the future for the rest of the users, cinder, nova and neutron needs login disable to run commands being superuser. --- strata/openstack-services/nova.morph | 2 ++ 1 file changed, 2 insertions(+) (limited to 'strata/openstack-services/nova.morph') diff --git a/strata/openstack-services/nova.morph b/strata/openstack-services/nova.morph index 98ac9854..bb6dd756 100644 --- a/strata/openstack-services/nova.morph +++ b/strata/openstack-services/nova.morph @@ -12,5 +12,7 @@ post-install-commands: - mkdir -p "$DESTDIR"/etc/sudoers.d - | install -D -m 0440 /proc/self/fd/0 <<'EOF' "$DESTDIR"/etc/sudoers.d/nova-rootwrap + Defaults:nova !requiretty + nova ALL=(root) NOPASSWD: /usr/bin/nova-rootwrap /etc/nova/rootwrap.conf * EOF -- cgit v1.2.1