From b4fa54f1aeda82458a77a25c3b68ad9baa55c25e Mon Sep 17 00:00:00 2001 From: Dan Fandrich Date: Sat, 16 Dec 2023 16:36:05 -0800 Subject: Allow members of mga-sysadmin to run sudo on all servers This is try #2 after e0230ba1 was reverted. This time, the sudoers file is given a name that will cause it to be sorted before any other rules, allowing those other rules to override it. This is on the assumption that the revert was needed because a NOPASSWD: rule wasn't taking effect because this one (which requires a password) took precedence. --- deployment/common/templates/sudoers.sysadmin | 1 + 1 file changed, 1 insertion(+) create mode 100644 deployment/common/templates/sudoers.sysadmin (limited to 'deployment/common/templates') diff --git a/deployment/common/templates/sudoers.sysadmin b/deployment/common/templates/sudoers.sysadmin new file mode 100644 index 00000000..874b1858 --- /dev/null +++ b/deployment/common/templates/sudoers.sysadmin @@ -0,0 +1 @@ +%mga-sysadmin ALL=(ALL) ALL -- cgit v1.2.1