diff options
| author |   Yolanda Robla Mota <yroblamo@redhat.com> | 2016-10-11 11:26:39 +0200 |
|---|---|---|
| committer | Yolanda Robla Mota <yroblamo@redhat.com> | 2016-10-11 12:21:32 +0200 |
| commit | a795342c11357784b522ccf347eb3463124aa525 (patch) | |
| tree | 8b2abc77b1c2347a172ce35301aaf10253bb92a8 | |
| parent | 86e7153ddd6e6d7bf47955c8b82e7c5a8ede492e (diff) | |
Tune sudo settings on server
We need to have passwordless sudo, and not require
a tty.
Change-Id: Iee11cade89a45b49d6b623f07d8ccb76f9e5882d
Signed-Off-By: Yolanda Robla <yroblamo@redhat.com>
| -rw-r--r-- | prototypes/puppet-infracloud/modules/opnfv/manifests/server.pp | 16 |
1 files changed, 15 insertions, 1 deletions
diff --git a/prototypes/puppet-infracloud/modules/opnfv/manifests/server.pp b/prototypes/puppet-infracloud/modules/opnfv/manifests/server.pp index c4bff0962..a1e7d5d0e 100644 --- a/prototypes/puppet-infracloud/modules/opnfv/manifests/server.pp +++ b/prototypes/puppet-infracloud/modules/opnfv/manifests/server.pp @@ -224,6 +224,20 @@ class opnfv::server ( } } - # add hosts entries + # ensure that we have non-pass sudo, and + # not require tty + file_line { 'sudo_rule_no_pw': + path => '/etc/sudoers', + line => '%wheel ALL=(ALL) NOPASSWD: ALL', + } + file_line { 'sudo_rule_notty': + path => '/etc/sudoers', + line => 'Defaults requiretty', + match => '.*requiretty.*', + match_for_absence => true, + ensure => absent, + multiple => true, + } + create_resources('host', hiera_hash('hosts')) } |