diff options
| author | Mohit Mehta <mohit.mehta@vyatta.com> | 2009-02-06 15:11:03 -0800 |
|---|---|---|
| committer | Mohit Mehta <mohit.mehta@vyatta.com> | 2009-02-06 15:11:03 -0800 |
| commit | 0ddc16c0e15565dc97ca5fead6e2818da67b726b (patch) | |
| tree | 036327da3e95de052236c2024f2fe001d8b3e909 /debian/vyatta-cfg-system.postinst.in | |
| parent | ac5a252fc4fa17de06d74e1c643b267489457728 (diff) | |
| download | vyatta-cfg-system-0ddc16c0e15565dc97ca5fead6e2818da67b726b.tar.gz vyatta-cfg-system-0ddc16c0e15565dc97ca5fead6e2818da67b726b.zip | |
permit operator-level user to issue show and clear commands for firewall
Diffstat (limited to 'debian/vyatta-cfg-system.postinst.in')
| -rw-r--r-- | debian/vyatta-cfg-system.postinst.in | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/debian/vyatta-cfg-system.postinst.in b/debian/vyatta-cfg-system.postinst.in index 0f699d2b..10ceac14 100644 --- a/debian/vyatta-cfg-system.postinst.in +++ b/debian/vyatta-cfg-system.postinst.in @@ -53,9 +53,12 @@ Defaults env_keep+=VYATTA_* Cmnd_Alias IPTABLES = /sbin/iptables --list -n,\ /sbin/iptables -L -vn,\ /sbin/iptables -L * -vn,\ - /sbin/iptables -t * -L -vn, \ + /sbin/iptables -t * -L *, \ /sbin/iptables -Z *,\ - /sbin/iptables -Z -t nat + /sbin/iptables -Z -t nat, \ + /sbin/iptables -t * -Z * +Cmnd_Alias IP6TABLES = /sbin/ip6tables -t * -Z *, \ + /sbin/ip6tables -t * -L * Cmnd_Alias IPFLUSH = /sbin/ip route flush cache, \ /sbin/ip route flush cache *,\ /sbin/ip neigh flush to *, \ @@ -74,7 +77,7 @@ Cmnd_Alias PPPOE_CMDS = /sbin/pppd, /sbin/poff, /usr/sbin/pppstats Cmnd_Alias PCAPTURE = /usr/bin/tshark, /usr/bin/tcpdump %operator ALL=NOPASSWD: DATE, IPTABLES, ETHTOOL, IPFLUSH, \ PPPOE_CMDS, PCAPTURE, /usr/sbin/wanpipemon, \ - /usr/bin/lsof, /usr/sbin/conntrack + /usr/bin/lsof, /usr/sbin/conntrack, IP6TABLES EOF cat <<EOF >>/etc/sudoers %users ALL=NOPASSWD: ${bindir}/sudo-users/ |