Subversion Repositories ALCASAR

Rev

Rev 2324 | Rev 2559 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log

Rev Author Line No. Line
1 root 1
# sudoers file.
2
#
3
# This file MUST be edited with the 'visudo' command as root.
4
#
5
# See the sudoers man page for the details on how to write a sudoers file.
6
#
7
 
8
# Host alias specification
1349 richard 9
Host_Alias	LAN_ORG=192.168.182.0/255.255.255.0,localhost		#réseau de l'organisme
1 root 10
# User alias specification
1710 richard 11
User_Alias	ADMIN=sysadmin				# local admin account
12
User_Alias	ADMWEB=apache				# web admin account
1 root 13
 
14
# Cmnd alias specification
2016 raphael.pi 15
Cmnd_Alias	NET=/sbin/ip,/sbin/arping,/sbin/arp,/usr/sbin/tcpdump,/usr/local/bin/alcasar-watchdog.sh,/usr/local/bin/alcasar-dhcp.sh	# network commands
2324 tom.houday 16
Cmnd_Alias	URPMI=/usr/sbin/urpmi,/usr/sbin/urpmi.update										# packages managment
17
Cmnd_Alias	BYPASS=/usr/local/bin/alcasar-bypass.sh											# authentication bypass
18
Cmnd_Alias	RADDB=/usr/bin/radwho,/usr/sbin/chilli_query										# to manage users in command line
19
Cmnd_Alias	SQL=/usr/local/bin/alcasar-mysql.sh											# to export users database
20
Cmnd_Alias	SYSTEM_BACKUP=/usr/local/bin/alcasar-conf.sh										# to create conf backup file
21
Cmnd_Alias	EXPORT=/usr/local/bin/alcasar-archive.sh										# to export/save the log files
1845 raphael.pi 22
Cmnd_Alias	BL=/usr/local/bin/alcasar-bl.sh,/usr/local/bin/alcasar-havp.sh,/usr/local/bin/alcasar-file-clean.sh,/usr/local/bin/alcasar-url_filter_wl.sh,/usr/local/bin/alcasar-url_filter_bl.sh	# to manage the filtering system
2324 tom.houday 23
Cmnd_Alias	NF=/usr/local/bin/alcasar-iptables.sh,/usr/sbin/ipset									# to manage the firewall
24
Cmnd_Alias	LOGOUT=/usr/local/bin/alcasar-logout.sh											# to disconnect the users
25
Cmnd_Alias	UAM=/usr/local/bin/alcasar-uamallowed.sh										# to manage the trusted websites (uamallowed)
26
Cmnd_Alias	SERVICE=/usr/bin/systemctl,/usr/sbin/shutdown										# to manage the linux services
27
Cmnd_Alias	GAMMU=/usr/local/bin/alcasar-sms.sh											# to manage the SMS subsystem
28
Cmnd_Alias	SSL=/usr/local/bin/alcasar-importcert.sh,/usr/local/bin/alcasar-letsencrypt.sh,/usr/local/bin/alcasar-https.sh		# to manage the certificates
29
Cmnd_Alias	HTDIGEST=/usr/local/bin/alcasar-profil.sh										# to manage htdigest groups
30
Cmnd_Alias	LOG_GEN=/usr/local/bin/alcasar-generate_log.sh										# to create log PDF from ACC
2466 richard 31
Cmnd_Alias	LDAP=/usr/local/bin/alcasar-ldap.sh											# to enable/disable LDAP connection
1 root 32
 
33
# Defaults specification
34
# Defaults syslog=auth
35
 
36
# Runas alias specification
37
 
38
# User privilege specification
39
root	ALL=(ALL) ALL
40
 
41
# Uncomment to allow people in group wheel to run all commands
42
# %wheel	ALL=(ALL)	ALL
43
 
44
# Same thing without a password
45
# %wheel	ALL=(ALL)	NOPASSWD: ALL
46
 
47
# Samples
48
# %users  ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
49
# %users  localhost=/sbin/shutdown -h now
50
 
2466 richard 51
ADMWEB	LAN_ORG=(root)	NOPASSWD: NET,SYSTEM_BACKUP,SQL,BL,NF,EXPORT,RADDB,LOGOUT,UAM,SERVICE,GAMMU,SSL,HTDIGEST,LOG_GEN,LDAP
2304 tom.houday 52
ADMIN	LAN_ORG=(root)	NOPASSWD: NET,URPMI,BYPASS,SYSTEM_BACKUP,SQL,EXPORT,SERVICE,SSL