From eace3c7daf2e56822391b98f65c2814e953add00 Mon Sep 17 00:00:00 2001
From: Klas Arvidsson <klas.arvidsson@liu.se>
Date: Thu, 2 Jan 2020 21:07:54 +0100
Subject: [PATCH] sudo control of systemctl, updated runas examadm rules

---
 files/sudoers_aes | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/files/sudoers_aes b/files/sudoers_aes
index ed7936c..01e92de 100644
--- a/files/sudoers_aes
+++ b/files/sudoers_aes
@@ -2,6 +2,9 @@ klaar36 ALL=(ALL) NOPASSWD: ALL
 filst04 ALL=(ALL) NOPASSWD: ALL
 
 User_Alias EXAM_ADMINS = torjo38, klaar36, vikol94, magni54, filst04
-Runas_Alias EXAM_USER = examadm
+Runas_Alias EXAM_USER = examadm, %examadm
 
-EXAM_ADMINS ALL=(EXAM_USER) NOPASSWD:NOEXEC: ALL
+Cmnd_Alias SERVICE_CMDS = /usr/bin/systemctl /usr/bin/less
+
+EXAM_ADMINS ALL=(ALL) NOPASSWD: SERVICE_CMDS
+EXAM_ADMINS ALL=(EXAM_USER) NOPASSWD: ALL
-- 
GitLab