From a123b2a41fa78db4a6f8781ef576dfbf64bd581b Mon Sep 17 00:00:00 2001 From: Andrew Schoen Date: Mon, 22 Jun 2015 10:00:53 -0500 Subject: [PATCH] cobbler: set the mode to 0440 on /etc/sudoers.d/cephlab_sudo Apparently most other distros default anything in /etc/sudoers.d to 0440 except precise. Precise, by default, sets the mode of /etc/sudoers.d/cephlab_sudo to 0664 which completely breaks sudo usage. This makes cobbler explicitly set the mode to 0440. Signed-off-by: Andrew Schoen --- roles/cobbler/templates/snippets/cephlab_user | 2 ++ 1 file changed, 2 insertions(+) diff --git a/roles/cobbler/templates/snippets/cephlab_user b/roles/cobbler/templates/snippets/cephlab_user index d85ad82..456ce47 100644 --- a/roles/cobbler/templates/snippets/cephlab_user +++ b/roles/cobbler/templates/snippets/cephlab_user @@ -13,6 +13,8 @@ Defaults !requiretty Defaults visiblepw EOF +chmod 0440 /etc/sudoers.d/cephlab_sudo + install -d -m0755 --owner=$user --group=$user /home/$user/.ssh cat >> $auth_keys << EOF -- 2.39.5