From e8be7bb0f0b8e3355c7ae4ad70f37317cce0a0fb Mon Sep 17 00:00:00 2001 From: Helmut Grohne Date: Tue, 1 Sep 2015 17:07:03 +0200 Subject: trim sudoers for rebootstrap node --- .../profitbricks-build4-amd64/etc/sudoers.d/jenkins | 20 +------------------- 1 file changed, 1 insertion(+), 19 deletions(-) (limited to 'hosts/profitbricks-build4-amd64') diff --git a/hosts/profitbricks-build4-amd64/etc/sudoers.d/jenkins b/hosts/profitbricks-build4-amd64/etc/sudoers.d/jenkins index 5cb74414..cccfc2d5 100644 --- a/hosts/profitbricks-build4-amd64/etc/sudoers.d/jenkins +++ b/hosts/profitbricks-build4-amd64/etc/sudoers.d/jenkins @@ -1,26 +1,8 @@ jenkins ALL= \ NOPASSWD: /usr/sbin/debootstrap *, \ - /usr/bin/tee /chroots/*, \ - /usr/bin/tee -a /chroots/*, \ - /usr/bin/tee /etc/schroot/chroot.d/jenkins*, \ - /bin/chmod +x /chroots/*, \ /usr/sbin/chroot /chroots/*, \ - /usr/sbin/chroot /media/*, \ - /bin/ls -la /media/*, \ /bin/rm -rf --one-file-system /chroots/*, \ - /bin/rm -rf --one-file-system /schroots/*, \ - /bin/mv /chroots/* /schroots/*, \ - /bin/mv /schroots/* /schroots/*, \ - /bin/umount -l /chroots/*, \ - /bin/mount -o loop*, \ - /bin/mount --bind *, \ - /usr/bin/du *, \ - /bin/kill *, \ - /usr/bin/file *, \ - /bin/dd if=/dev/zero of=/dev/jenkins*, \ - /usr/bin/dcmd rm *.changes, \ - /usr/bin/dcmd rm *.dsc, \ - /usr/bin/apt-get update + /bin/umount -l /chroots/* # keep these environment variables Defaults env_keep += "http_proxy", env_reset -- cgit v1.2.3-54-g00ecf