Benutzerrechte angepasst, DASBURO-97

diff --git a/customer/dbad/dbad-web42.pixelpark.net.yaml b/customer/dbad/dbad-web42.pixelpark.net.yaml
index 18acd3a0762a6528fa053b4b0b08e9405f52def1..02107a88a134ce635997170d28d3e4da95a32ff4 100644 (file)
--- a/customer/dbad/dbad-web42.pixelpark.net.yaml
+++ b/customer/dbad/dbad-web42.pixelpark.net.yaml
@@ -8,6 +8,25 @@ accounts::users:
     apply: true
   alex.befort:
     apply: true
+    sudo_cmds:
+      - MAILLOG
+      - SENDMAIL
+      - SENDMAILEDIT
+      - SENDMAILQ
+  thomas.mues:
+    apply: true
+    sudo_cmds:
+      - MAILLOG
+      - SENDMAIL
+      - SENDMAILEDIT
+      - SENDMAILQ
+  tim.schierbaum:
+    apply: true
+    sudo_cmds:
+      - MAILLOG
+      - SENDMAIL
+      - SENDMAILEDIT
+      - SENDMAILQ
   deployer:
     groups:
       - tomcat

diff --git a/customer/dbad/dbad-web43.pixelpark.net.yaml b/customer/dbad/dbad-web43.pixelpark.net.yaml
index 18acd3a0762a6528fa053b4b0b08e9405f52def1..02107a88a134ce635997170d28d3e4da95a32ff4 100644 (file)
--- a/customer/dbad/dbad-web43.pixelpark.net.yaml
+++ b/customer/dbad/dbad-web43.pixelpark.net.yaml
@@ -8,6 +8,25 @@ accounts::users:
     apply: true
   alex.befort:
     apply: true
+    sudo_cmds:
+      - MAILLOG
+      - SENDMAIL
+      - SENDMAILEDIT
+      - SENDMAILQ
+  thomas.mues:
+    apply: true
+    sudo_cmds:
+      - MAILLOG
+      - SENDMAIL
+      - SENDMAILEDIT
+      - SENDMAILQ
+  tim.schierbaum:
+    apply: true
+    sudo_cmds:
+      - MAILLOG
+      - SENDMAIL
+      - SENDMAILEDIT
+      - SENDMAILQ
   deployer:
     groups:
       - tomcat

diff --git a/customer/dbad/production.yaml b/customer/dbad/production.yaml
index 5a6297d941e4951c38e3eb4a10a36c25c7cc45f0..95c784defaea6225241e6c68e6d5cea9e5305c13 100644 (file)
--- a/customer/dbad/production.yaml
+++ b/customer/dbad/production.yaml
@@ -253,8 +253,12 @@ sudo::configs:
       Cmnd_Alias JBOSS = /www/bin/jboss,/www/bin/jboss.user,/bin/systemctl * jboss*
       Cmnd_Alias LN = /bin/ln,/bin/ln -s
       Cmnd_Alias LOGEDIT = /usr/bin/vim /www/logs/*,/bin/rm /www/logs/*,/bin/rm -f /www/logs/*,/bin/rm -rf /www/logs/*,/usr/bin/vim /var/log/httpd/*,/bin/rm /var/log/httpd/*,/bin/rm -f /var/log/httpd/*,/bin/rm -rf /var/log/httpd/*
+      Cmnd_Alias MAILLOG = /usr/bin/cat /var/log/maillog
       Cmnd_Alias MSQL = /www/bin/mysql,/bin/systemctl * mysqld,/bin/systemctl * mysqld.service
       Cmnd_Alias RM = /bin/rm,/bin/rm -f,/bin/rm -rf
+      Cmnd_Alias SENDMAIL = systemctl start sendmail, systemctl stop sendmail, systemctl restart sendmail, systemctl status sendmail
+      Cmnd_Alias SENDMAILEDIT = /usr/bin/vim /etc/mail/sendmail.cf, /usr/bin/vim /etc/mail/sendmail.mc
+      Cmnd_Alias SENDMAILQ = /usr/bin/mailq, /usr/sbin/sendmail -q
       Cmnd_Alias SUDBADADMIN = /bin/su - dbad.admin
       Cmnd_Alias SUDBADMIN = /bin/su - db.admin
       Cmnd_Alias SUMUNIN = /bin/su - munin