sudoers

   1 # -----------------------------------------------------------------
   2 # We're assuming that ssh authentication has already been used, this
   3 # is more risky than I'm comfortable with, but it saves the problem
   4 # of managing a separate password file.
   5 # -----------------------------------------------------------------
   6 Defaults        !authenticate
   7
   8 # -----------------------------------------------------------------
   9 # No surpise... root has universal access
  10 # -----------------------------------------------------------------
  11 root            ALL = (ALL) ALL
  12
  13 # -----------------------------------------------------------------
  14 # ADMIN_CMDS are those available to PlanetLab administrators
  15 # -----------------------------------------------------------------
  16 Cmnd_Alias      ADMIN_CMDS =    /usr/local/planetlab/bin/pl-ps, \
  17                                 /usr/local/planetlab/bin/pl-catlogs, \
  18                                 /usr/local/planetlab/bin/pl-limitbw, \
  19                                 /usr/local/planetlab/bin/pl-kill, \
  20                                 /usr/local/planetlab/bin/pl-sanetop, \
  21                                 /usr/sbin/tcpdump, \
  22                                 /usr/local/planetlab/bin/tcpdumpkill, \
  23                                 /sbin/shutdown, \
  24                                 /usr/local/planetlab/bin/tc, \
  25                                 /etc/init.d/vserver-init, \
  26                                 /usr/local/planetlab/bin/NodeUpdate.py, \
  27                                 /usr/local/planetlab/bin/PlanetLabConf.py, \
  28                                 /usr/local/planetlab/bin/PlanetLabKeys.py, \
  29                                 /etc/init.d/ntpd, \
  30                                 /usr/sbin/ntpdate
  31
  32
  33 # -----------------------------------------------------------------
  34 # SITE_CMDS are those available to local site administrators
  35 # -----------------------------------------------------------------
  36 Cmnd_Alias      SITE_CMDS =     /usr/local/planetlab/bin/pl-ps, \
  37                                 /usr/local/planetlab/bin/pl-catlogs, \
  38                                 /usr/local/planetlab/bin/pl-limitbw, \
  39                                 /usr/sbin/tcpdump, \
  40                                 /sbin/shutdown, \
  41                                 /usr/bin/passwd -d site_admin, \
  42                                 /usr/bin/passwd site_admin
  43
  44 # -----------------------------------------------------------------
  45 # PLADMINS -- accounts with admin privileges on all nodes
  46 # -----------------------------------------------------------------
  47 pl_admin        ALL = ADMIN_CMDS
  48
  49 # -----------------------------------------------------------------
  50 # Site Admins -- accounts with admin privileges on the local nodes
  51 # -----------------------------------------------------------------
  52 site_admin      ALL = SITE_CMDS