summaryrefslogtreecommitdiff
path: root/src/etc/sudoers.d
diff options
context:
space:
mode:
authorsarthurdev <965089+sarthurdev@users.noreply.github.com>2025-09-23 09:48:07 +0200
committersarthurdev <965089+sarthurdev@users.noreply.github.com>2025-09-23 12:10:31 +0200
commit868e45f86d39936ad04566e702ac95759b738149 (patch)
treeac47138df7b20fe4be9f2573a077eb43397dd849 /src/etc/sudoers.d
parent25efe38a3a9ce7278e99500b1dcefc3f0a1abb27 (diff)
downloadvyos-1x-868e45f86d39936ad04566e702ac95759b738149.tar.gz
vyos-1x-868e45f86d39936ad04566e702ac95759b738149.zip
kea: T7281: Preserve systemd unit environment in VRF exec
Diffstat (limited to 'src/etc/sudoers.d')
-rw-r--r--src/etc/sudoers.d/vyos3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/etc/sudoers.d/vyos b/src/etc/sudoers.d/vyos
index 2dd8850c4..0feaabc2e 100644
--- a/src/etc/sudoers.d/vyos
+++ b/src/etc/sudoers.d/vyos
@@ -48,6 +48,7 @@ Cmnd_Alias DIAGNOSTICS = /bin/ip vrf exec * /bin/ping *, \
Cmnd_Alias KEA_IP6_ROUTES = /sbin/ip -6 route replace *,\
/sbin/ip -6 route del *
Cmnd_Alias KEA_DHCP = /bin/ip vrf exec * /usr/sbin/kea-dhcp*,\
+ /usr/bin/chown * /var/run/kea/*,\
/usr/bin/chown * /run/kea/*
%operator ALL=NOPASSWD: DATE, IPTABLES, ETHTOOL, IPFLUSH, HWINFO, \
PPPOE_CMDS, PCAPTURE, /usr/sbin/wanpipemon, \
@@ -64,4 +65,4 @@ Cmnd_Alias KEA_DHCP = /bin/ip vrf exec * /usr/sbin/kea-dhcp*,\
%sudo ALL=NOPASSWD: /usr/bin/mokutil
_kea ALL=NOPASSWD: KEA_IP6_ROUTES
-_kea ALL=NOPASSWD: KEA_DHCP
+_kea ALL=NOPASSWD:SETENV: KEA_DHCP