Skip to content

Commit c8b2810

Browse files
taoyl-mslguohan
authored andcommitted
[sudoer] Enable read-only commands for all users (#1558)
1 parent 4012e3d commit c8b2810

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

files/image_config/sudoers/sudoers

+3
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,9 @@ Cmnd_Alias PASSWD_CMDS = /usr/bin/config tacacs passkey *, \
3737
# User privilege specification
3838
root ALL=(ALL:ALL) ALL
3939

40+
# Allow all users to execute read only commands
41+
ALL ALL=NOPASSWD: READ_ONLY_CMDS
42+
4043
# Allow members of group sudo to execute any command
4144
%sudo ALL=(ALL:ALL) NOPASSWD: ALL
4245

0 commit comments

Comments
 (0)