Reduce allowed commands to run

This commit is contained in:
Gerald Pinder
2025-05-18 23:10:19 -04:00
parent d263adae92
commit 7a37318089

View File

@@ -1,3 +1,3 @@
Cmnd_Alias RKE_CMDS = /usr/bin/chown, /usr/bin/chmod, /usr/bin/mkdir, /usr/bin/systemctl, /usr/bin/cp, /usr/bin/find, /usr/bin/ls, /usr/bin/reboot, /usr/bin/install, /usr/bin/rke2, /usr/bin/firewall-cmd, /usr/bin/rm, /usr/bin/bootc, /usr/bin/rke2-killall.sh
Cmnd_Alias RKE_CMDS = /usr/bin/systemctl, /usr/bin/reboot, /usr/bin/rke2, /usr/bin/bootc, /usr/bin/rke2-killall.sh, /home/rke/install.sh, /home/rke/configure.sh, /home/rke/start.sh
rke ALL=(root) NOPASSWD: RKE_CMDS