matthew/sonic-buildimage
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

[image]: prevent password related command into syslog (#1450)

Browse Source 
* [image]: prevent password related command into syslog
This commit is contained in:
lguohan 2018-03-02 21:21:25 -08:00 committed by GitHub
parent c689253b3f
commit a9d2e13627
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
files/image_config/sudoers/sudoers
View File

@ -31,12 +31,17 @@ Cmnd_Alias READ_ONLY_CMDS = /usr/bin/decode-syseeprom, \
/bin/cat /var/log/syslog, \
/usr/bin/tail -f /var/log/syslog
Cmnd_Alias PASSWD_CMDS = /usr/bin/config tacacs passkey *, \
/usr/sbin/chpasswd *
# User privilege specification
root ALL=(ALL:ALL) ALL
# Allow members of group sudo to execute any command
%sudo ALL=(ALL:ALL) NOPASSWD: ALL
# Prevent password related command into syslog
Defaults!PASSWD_CMDS !syslog
# See sudoers(5) for more information on "#include" directives: