-
Notifications
You must be signed in to change notification settings - Fork 5
/
sudoers
113 lines (108 loc) · 4.11 KB
/
sudoers
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
#generated
# Environment variables to keep for root and %wheel.
Defaults:root,%wheel env_keep+=TERMINFO_DIRS
Defaults:root,%wheel env_keep+=TERMINFO
# Keep SSH_AUTH_SOCK so that pam_ssh_agent_auth.so can do its magic.
Defaults env_keep+=SSH_AUTH_SOCK
# "root" is allowed to do anything.
root ALL=(ALL) SETENV: ALL
raskin ALL= NOPASSWD: /etc/sudo-scripts/setfreq,\
/etc/sudo-scripts/standby,\
/etc/sudo-scripts/xfs,\
/var/run/current-system/sw/bin/wodim,\
/var/run/current-system/sw/sbin/halt,\
/etc/sudo-scripts/dateupdate,\
/etc/sudo-scripts/eth,\
/etc/sudo-scripts/wifi,\
/etc/sudo-scripts/wvdial,\
/etc/sudo-scripts/nonet,\
/etc/sudo-scripts/up-ifs,\
/etc/sudo-scripts/brightness,\
/etc/sudo-scripts/renice0,\
/etc/sudo-scripts/glusterfs-start,\
/etc/sudo-scripts/gvpe-start,\
/etc/sudo-scripts/chmod,\
/etc/sudo-scripts/update-mesa-link,\
/etc/sudo-scripts/arpflush,\
/etc/sudo-scripts/wpa-status,\
/etc/sudo-scripts/nas-halt,\
/etc/sudo-scripts/wifi-scan,\
/etc/sudo-scripts/start-home-multiplexor,\
/etc/sudo-scripts/eth-for-nas,\
/etc/sudo-scripts/home-alt-net,\
/etc/sudo-scripts/xserver,\
/etc/sudo-scripts/nix-cleanup-tests,\
/run/current-system/sw/bin/chvt,\
/run/current-system/bin/run-service bind,\
/run/current-system/bin/run-service gpm,\
/run/current-system/bin/run-service nix-binary-cache,\
/run/current-system/bin/run-service postgresql,\
/run/current-system/bin/run-service udev,\
/run/current-system/bin/run-service wlan,\
/run/current-system/bin/run-service bumblebee,\
/etc/sudo-scripts/create-subuser,\
/etc/sudo-scripts/drop-subuser,\
/etc/sudo-scripts/switch-to-subuser,\
/etc/sudo-scripts/grant-to-subuser,\
/etc/sudo-scripts/take-from-subuser,\
/etc/sudo-scripts/start-system-dbus,\
/etc/sudo-scripts/tether-android,\
/etc/sudo-scripts/reload-nouveau,\
/var/run/current-system/sw/bin/powertop,\
/etc/sudo-scripts/nix-forget-cache-misses,\
/run/current-system/sw/bin/true
raskin ALL= NOPASSWD: SETENV: /etc/sudo-scripts/checkGw6
raskin ALL= /bin/sh
polly ALL= /bin/sh
polly ALL= NOPASSWD: /etc/sudo-scripts/setfreq,\
/etc/sudo-scripts/standby,\
/etc/sudo-scripts/xfs,\
/var/run/current-system/sw/bin/wodim,\
/var/run/current-system/sw/sbin/halt,\
/etc/sudo-scripts/dateupdate,\
/etc/sudo-scripts/eth,\
/etc/sudo-scripts/wifi,\
/etc/sudo-scripts/wvdial,\
/etc/sudo-scripts/nonet,\
/etc/sudo-scripts/up-ifs,\
/etc/sudo-scripts/brightness,\
/etc/sudo-scripts/renice0,\
/etc/sudo-scripts/glusterfs-start,\
/etc/sudo-scripts/gvpe-start,\
/etc/sudo-scripts/chmod,\
/etc/sudo-scripts/update-mesa-link,\
/etc/sudo-scripts/arpflush,\
/etc/sudo-scripts/wpa-status,\
/etc/sudo-scripts/nas-halt,\
/etc/sudo-scripts/wifi-scan,\
/etc/sudo-scripts/start-home-multiplexor,\
/etc/sudo-scripts/eth-for-nas,\
/etc/sudo-scripts/home-alt-net,\
/etc/sudo-scripts/xserver,\
/etc/sudo-scripts/nix-cleanup-tests,\
/run/current-system/sw/bin/chvt,\
/run/current-system/bin/run-service bind,\
/run/current-system/bin/run-service gpm,\
/run/current-system/bin/run-service nix-binary-cache,\
/run/current-system/bin/run-service postgresql,\
/run/current-system/bin/run-service udev,\
/run/current-system/bin/run-service wlan,\
/run/current-system/bin/run-service bumblebee,\
/etc/sudo-scripts/create-subuser,\
/etc/sudo-scripts/drop-subuser,\
/etc/sudo-scripts/switch-to-subuser,\
/etc/sudo-scripts/grant-to-subuser,\
/etc/sudo-scripts/take-from-subuser,\
/etc/sudo-scripts/start-system-dbus,\
/etc/sudo-scripts/tether-android,\
/etc/sudo-scripts/reload-nouveau,\
/var/run/current-system/sw/bin/powertop,\
/run/current-system/sw/bin/true
Defaults!/bin/sh rootpw, timestamp_timeout=0
Defaults!/etc/sudo-scripts/wpa-status !syslog
sshguest ALL= /var/run/current-system/sw/bin/ls /home/sshguest
wwwrun ALL= NOPASSWD: /var/run/current-system/sw/bin/mplayer,\
/var/run/current-system/sw/bin/amixer
xserver ALL= NOPASSWD: /var/run/current-system/sw/sbin/start xserver,\
/var/run/current-system/sw/sbin/stop xserver
halt ALL= NOPASSWD: /var/run/current-system/sw/sbin/halt