diff options
| author | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2024-01-20 22:25:06 +0100 |
|---|---|---|
| committer | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2024-01-24 22:17:25 +0100 |
| commit | 8e2112261c68189c2c78455c3e1f32d7f5447ab9 (patch) | |
| tree | 8055a7ba62f0d9b886caf7d01496add9c78354c5 /src/etc/sudoers.d | |
| parent | 5c29cf757b449d68f06715a58d0b2e65e0a6c636 (diff) | |
| download | vyos-1x-8e2112261c68189c2c78455c3e1f32d7f5447ab9.tar.gz vyos-1x-8e2112261c68189c2c78455c3e1f32d7f5447ab9.zip | |
dhcpv6: T3771: Allow installation of routes for delegated prefixes
Diffstat (limited to 'src/etc/sudoers.d')
| -rw-r--r-- | src/etc/sudoers.d/vyos | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/etc/sudoers.d/vyos b/src/etc/sudoers.d/vyos index c099446ba..63a944f41 100644 --- a/src/etc/sudoers.d/vyos +++ b/src/etc/sudoers.d/vyos @@ -44,6 +44,8 @@ Cmnd_Alias DIAGNOSTICS = /bin/ip vrf exec * /bin/ping *, \ /bin/ip vrf exec * /bin/traceroute *, \ /bin/ip vrf exec * /usr/bin/mtr *, \ /usr/libexec/vyos/op_mode/* +Cmnd_Alias KEA_IP6_ROUTES = /sbin/ip -6 route replace *,\ + /sbin/ip -6 route del * %operator ALL=NOPASSWD: DATE, IPTABLES, ETHTOOL, IPFLUSH, HWINFO, \ PPPOE_CMDS, PCAPTURE, /usr/sbin/wanpipemon, \ DMIDECODE, DISK, CONNTRACK, IP6TABLES, \ @@ -55,3 +57,4 @@ Cmnd_Alias DIAGNOSTICS = /bin/ip vrf exec * /bin/ping *, \ # Allow members of group sudo to execute any command %sudo ALL=NOPASSWD: ALL +_kea ALL=NOPASSWD: KEA_IP6_ROUTES |