vyos-1x.git/src/etc/sudoers.d, branch fix/T8955-http-api-verify-tlsVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=fix%2FT8955-http-api-verify-tls2025-09-23T17:55:17+00:00kea: T7854: Use helper for Kea VRF systemd units2025-09-23T17:55:17+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2025-09-23T13:23:55+00:00urn:sha1:cdf9fe4c9cfd4572c49207936c2304162e91e7b1kea: T7281: Preserve systemd unit environment in VRF exec2025-09-23T10:10:31+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2025-09-23T07:48:07+00:00urn:sha1:868e45f86d39936ad04566e702ac95759b738149kea: T6211: add VRF support for KEA dhcp server2025-08-15T07:31:49+00:00David Vølkerdavid@voelker.dk2025-08-15T07:31:49+00:00urn:sha1:974f9a5d5e13241e2b4ea54152bf835db6b7feffsudo: T6926: remove spam messages to syslog2024-12-01T11:44:10+00:00Christian Breunigchristian@breunig.cc2024-12-01T11:44:10+00:00urn:sha1:24b1d246373a0def45a6e6ba1b0ecabe19fe1d58
Right now every command that's executed via op-mode/conf-mode is logged with a
session entry/exit and command execution into syslog.
sudo[1082396]: vyos : TTY=pts/1 ; PWD=/home/vyos ; USER=root ; COMMAND=/usr/bin/mv /tmp/config.boot.1082388 /opt/vyatta/etc/config/archive/config.boot
sudo[1082396]: pam_unix(sudo:session): session opened for user root(uid=0) by vyos(uid=1002)
sudo[1082396]: pam_unix(sudo:session): session closed for user root
sudo[1082399]: vyos : TTY=pts/1 ; PWD=/home/vyos ; USER=root ; COMMAND=/usr/sbin/logrotate -f -s /opt/vyatta/etc/config/archive/lr.state /opt/vyatta/etc/config/archive/lr.conf
sudo[1082399]: pam_unix(sudo:session): session opened for user root(uid=0) by vyos(uid=1002)
sudo[1082399]: pam_unix(sudo:session): session closed for user root
This heavily bloats remote logging services - remove the log entries
T861: op-mode: "show version" will display secure boot state2024-09-16T15:28:50+00:00Christian Breunigchristian@breunig.cc2024-08-26T18:23:32+00:00urn:sha1:b78cc96cc4c4d506b7e959ec6ec9c3e7fc09fc33
vyos@vyos:~$ show ver
...
Architecture: x86_64
Boot via: installed image
System type: KVM guest
Secure Boot: enabled
...
dhcpv6: T3771: Allow installation of routes for delegated prefixes2024-01-24T21:17:25+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2024-01-20T21:25:06+00:00urn:sha1:8e2112261c68189c2c78455c3e1f32d7f5447ab9op-mode: T5658: add VRF support for "monitor traceroute"2023-11-09T21:17:25+00:00bbabichbbabich@datamossa.com2023-11-04T11:23:17+00:00urn:sha1:07ecc0c33fb32878cac25ec84f2f3a977588f0ddT4533: Allow basic permissions to unprivileged RADIUS users2022-10-14T17:54:43+00:00Viacheslav Hletenkov.gletenko@vyos.io2022-10-14T17:54:43+00:00urn:sha1:372ccffe5bd1a9f44e18ae796b6f10b9ba5e95c8
Unprivileged RADIUS users cannot do simple diagnostics like ping
or traceroute. Allow them such tools.
Ability to execute op-mode commands for them.
It is not new 'operator mode' feature but it allows RADIUS users
execute op-mode commands
Import sudoers configuration from vyatta-cfg-system2021-06-26T20:10:59+00:00Christian Poessingerchristian@poessinger.com2021-06-26T20:10:59+00:00urn:sha1:120b866bf28fb8f6a82404a1254f8e3ad491e0ac