[multi asic] add ip netns identify command to sudoer (#6591)
Signed-off-by: Arvindsrinivasan Lakshmi Narasimhan <arlakshm@microsoft.com> - Why I did it The command sudo ip netns identify <pid> is used in function get_current_namespace to check in the cli command is running in host context or within a namespace. This function is used for every CLI command and command sudo ip netns identify <pid> needs to be added in sudoer files to allow users with RO access to run show cli commands This problem is not there on single asic platforms. - How I did it Add ip netns identify [0-9]* to sudoers file.
This commit is contained in:
parent
075bab813c
commit
a750f89630
@ -36,6 +36,7 @@ Cmnd_Alias READ_ONLY_CMDS = /sbin/brctl show, \
|
||||
/usr/bin/teamshow, \
|
||||
/usr/bin/vtysh -c show *, \
|
||||
/usr/bin/vtysh -n [0-9] -c show *, \
|
||||
/bin/ip netns identify [0-9]*, \
|
||||
/bin/cat /var/log/syslog*, \
|
||||
/usr/bin/tail -F /var/log/syslog
|
||||
|
||||
|
Reference in New Issue
Block a user