| 1 |
root |
1 |
# sudoers file.
|
|
|
2 |
#
|
|
|
3 |
# This file MUST be edited with the 'visudo' command as root.
|
|
|
4 |
#
|
|
|
5 |
# See the sudoers man page for the details on how to write a sudoers file.
|
|
|
6 |
#
|
|
|
7 |
|
|
|
8 |
# Host alias specification
|
| 1349 |
richard |
9 |
Host_Alias LAN_ORG=192.168.182.0/255.255.255.0,localhost #réseau de l'organisme
|
| 1 |
root |
10 |
# User alias specification
|
|
|
11 |
User_Alias ADMIN=sysadmin # compte d'admin local de l'organisme
|
| 434 |
richard |
12 |
User_Alias ADMWEB=apache # compte lié à l'interface de gestion
|
| 1 |
root |
13 |
|
|
|
14 |
# Cmnd alias specification
|
| 977 |
richard |
15 |
Cmnd_Alias NET=/sbin/ip,/sbin/arping,/sbin/arp,/usr/sbin/arpscan,/usr/sbin/tcpdump,/usr/local/bin/alcasar-watchdog.sh,/usr/local/sbin/alcasar-dhcp.sh # commandes réseau
|
| 1 |
root |
16 |
Cmnd_Alias URPMI=/usr/sbin/urpmi,/usr/sbin/urpmi.update # gestion des paquetages
|
| 434 |
richard |
17 |
Cmnd_Alias BYPASS=/usr/local/sbin/alcasar-bypass.sh # contournement du système d'authentification
|
| 1 |
root |
18 |
Cmnd_Alias RADDB=/usr/bin/radwho,/usr/sbin/chilli_query # pour la gestion des usagers en ligne
|
|
|
19 |
Cmnd_Alias SQL=/usr/local/sbin/alcasar-mysql.sh # pour exporter la base mysql
|
| 841 |
richard |
20 |
Cmnd_Alias SYSTEM_BACKUP=/usr/local/bin/alcasar-conf.sh # pour générer l'archive de configuration du serveur
|
| 1245 |
richard |
21 |
Cmnd_Alias EXPORT=/usr/local/bin/alcasar-archive.sh # pour exporter/sauvegarder les fichiers journaux
|
| 885 |
richard |
22 |
Cmnd_Alias BL=/usr/local/sbin/alcasar-bl.sh,/usr/local/sbin/alcasar-havp.sh,/usr/local/bin/alcasar-file-clean.sh,/usr/local/sbin/alcasar-url_filter.sh # pour gérer le filtrage WEB (blacklists, whitelist et antivirus)
|
| 1294 |
richard |
23 |
Cmnd_Alias NF=/usr/local/sbin/alcasar-nf.sh,/usr/local/bin/alcasar-iptables.sh,/usr/sbin/ipset # pour gérer le filtrage réseau
|
| 1 |
root |
24 |
Cmnd_Alias LOGOUT=/usr/local/sbin/alcasar-logout.sh # pour déconnecter les usagers
|
|
|
25 |
Cmnd_Alias UAM=/usr/local/sbin/alcasar-uamallowed.sh # pour gérer les site de confiance (uamallowed)
|
| 1041 |
richard |
26 |
Cmnd_Alias SERVICE=/sbin/service,/usr/bin/killall,/sbin/chkconfig,/bin/systemctl # pour gérer les services
|
| 1478 |
richard |
27 |
Cmnd_Alias GAMMU=/usr/local/bin/alcasar-sms.sh # pour gérer le service d'autoinscription par SMS
|
|
|
28 |
Cmnd_Alias SSL=/usr/bin/openssl # pour récupérer les info des certificats
|
| 1 |
root |
29 |
|
| 1452 |
richard |
30 |
|
| 1478 |
richard |
31 |
|
| 1 |
root |
32 |
# Defaults specification
|
|
|
33 |
# Defaults syslog=auth
|
|
|
34 |
|
|
|
35 |
# Runas alias specification
|
|
|
36 |
|
|
|
37 |
# User privilege specification
|
|
|
38 |
root ALL=(ALL) ALL
|
|
|
39 |
|
|
|
40 |
# Uncomment to allow people in group wheel to run all commands
|
|
|
41 |
# %wheel ALL=(ALL) ALL
|
|
|
42 |
|
|
|
43 |
# Same thing without a password
|
|
|
44 |
# %wheel ALL=(ALL) NOPASSWD: ALL
|
|
|
45 |
|
|
|
46 |
# Samples
|
|
|
47 |
# %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
|
|
|
48 |
# %users localhost=/sbin/shutdown -h now
|
|
|
49 |
|
| 1478 |
richard |
50 |
ADMWEB LAN_ORG=(root) NOPASSWD: NET,SYSTEM_BACKUP,SQL,BL,NF,EXPORT,RADDB,LOGOUT,UAM,SERVICE,GAMMU,SSL
|
| 1426 |
richard |
51 |
ADMIN LAN_ORG=(root) NOPASSWD: NET,/sbin/poweroff,/sbin/shutdown -h now,/sbin/reboot,URPMI,BYPASS,SYSTEM_BACKUP,SQL,EXPORT,SERVICE
|
| 1 |
root |
52 |
|