summaryrefslogtreecommitdiffstats
path: root/sudoers/sudoers_example_policy.xml
blob: 1323ff18e3d077c495c0f0d2ca9bec58a294df40 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
<?xml version="1.0" encoding="UTF-8"?>
<ipa xmlns="http://freeipa.org/xml/rng/sudo/1.0"> 
<metadata>
  <name>simple sudoers example, allowing mount/umount of a CD-ROM</name>
  <author>sbose@redhat.com</author>
  <version>0.7071</version>
  <RNGfile>sudoers.rng</RNGfile>
  <XSLTfile>sudoers.xslt</XSLTfile>
  <app>sudo</app>
</metadata>

<ipaconfig>
<sudoers>
  <subject><name>abc</name><type>netgroup</type></subject>
	<command><path>/sbin/umount /CDROM</path><tag>NOPASSWD</tag><runas>root</runas></command>
  <option><authenticate>on</authenticate></option>
	<command><path>/sbin/mount -o nosuid,nodev /dev/cd0a /CDROM</path></command>
</sudoers>
<sudoers>
  <subject><name>def</name><type>posixGroup</type></subject>
  <option><authenticate>off</authenticate></option>
</sudoers>
<sudoers>
  <subject><name>EWLFKFKJKFwe</name><type>ALL</type></subject>
  <command><path>/sbin/shutdown -r now</path></command>
  <option><lecture>always</lecture></option>
</sudoers>
</ipaconfig>

</ipa>