summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStig Thormodsrud <stig@vyatta.com>2008-02-26 16:21:48 -0800
committerStig Thormodsrud <stig@vyatta.com>2008-02-26 16:21:48 -0800
commitaf91e353109647aac21ac723c3ce9111cf582f3f (patch)
tree5da173aaeb930b68efd59011b47a394717e985eb
parent7d6f0458f50d781d04e6dfe79dbbabbc7f4f3084 (diff)
downloadvyatta-op-af91e353109647aac21ac723c3ce9111cf582f3f.tar.gz
vyatta-op-af91e353109647aac21ac723c3ce9111cf582f3f.zip
Fix operator permissions for "clear arp" and "clear ip route cache".
-rw-r--r--debian/vyatta-op.postinst.in2
-rw-r--r--templates/clear/arp/address/node.tag/node.def2
-rw-r--r--templates/clear/arp/interface/node.tag/node.def2
-rw-r--r--templates/clear/ip/route/cache/node.def2
-rw-r--r--templates/clear/ip/route/cache/node.tag/node.def2
5 files changed, 5 insertions, 5 deletions
diff --git a/debian/vyatta-op.postinst.in b/debian/vyatta-op.postinst.in
index 4f0b3b4..bdb6bcd 100644
--- a/debian/vyatta-op.postinst.in
+++ b/debian/vyatta-op.postinst.in
@@ -8,4 +8,4 @@ bindir=@bindir@
ln -sf /usr/sbin/ethtool ${bindir}/sudo-users/ethtool
ln -sf /usr/sbin/dmidecode ${bindir}/sudo-users/dmidecode
ln -sf /sbin/iptables ${bindir}/sudo-users/iptables
-
+ln -sf /bin/ip ${bindir}/sudo-users/ip
diff --git a/templates/clear/arp/address/node.tag/node.def b/templates/clear/arp/address/node.tag/node.def
index a25ad1f..1cfd2a3 100644
--- a/templates/clear/arp/address/node.tag/node.def
+++ b/templates/clear/arp/address/node.tag/node.def
@@ -1,3 +1,3 @@
help: Clear ARP cache for address
allowed: echo -n '<ip_address>'
-run: sudo ip neigh flush to $4
+run: sudo ${vyatta_bindir}/sudo-users/ip neigh flush to $4
diff --git a/templates/clear/arp/interface/node.tag/node.def b/templates/clear/arp/interface/node.tag/node.def
index d948ba2..eb0ec26 100644
--- a/templates/clear/arp/interface/node.tag/node.def
+++ b/templates/clear/arp/interface/node.tag/node.def
@@ -2,4 +2,4 @@ help: Clear ARP cache for interface
allowed: local -a array ;
array=( /sys/class/net/{eth,vmnet}* ) ;
echo -n ${array[@]##*/}
-run: sudo ip neigh flush dev $4
+run: sudo ${vyatta_bindir}/sudo-users/ip neigh flush dev $4
diff --git a/templates/clear/ip/route/cache/node.def b/templates/clear/ip/route/cache/node.def
index 3ec559d..9648cef 100644
--- a/templates/clear/ip/route/cache/node.def
+++ b/templates/clear/ip/route/cache/node.def
@@ -1,2 +1,2 @@
help: Flush the kernel route cache
-run: sudo ip route flush cache
+run: sudo ${vyatta_bindir}/sudo-users/ip route flush cache
diff --git a/templates/clear/ip/route/cache/node.tag/node.def b/templates/clear/ip/route/cache/node.tag/node.def
index 288fcbc..37fc458 100644
--- a/templates/clear/ip/route/cache/node.tag/node.def
+++ b/templates/clear/ip/route/cache/node.tag/node.def
@@ -1,3 +1,3 @@
help: Flush the kernel route cache for a given route
allowed: echo -n '<network>'
-run: sudo ip route flush cache $5
+run: sudo ${vyatta_bindir}/sudo-users/ip route flush cache $5