mirror of
https://git.FreeBSD.org/ports.git
synced 2024-11-14 23:46:10 +00:00
d02eecccd2
(currently the "password=y" feature to requre a password to be entered before running a command only works on DES passwords)
74 lines
2.5 KiB
SQL
74 lines
2.5 KiB
SQL
# This file lists commands that super(1) will execute for you as root.
|
|
|
|
# See the super.5 man page for information.
|
|
|
|
# Global options =========================================================
|
|
#
|
|
# Shell patterns are usually much more convenient to deal with in
|
|
# a super.tab file.
|
|
:global patterns=shell
|
|
|
|
# Log super actions to a file, under uid=root. (Note that loguid has to
|
|
# be part of same :global_options entry as logfile.)
|
|
:global logfile=/var/log/super.log loguid=root
|
|
|
|
# Also mail msgs on super errors...
|
|
:global mail="/usr/bin/Mail -s '*** super ***' joeblow"
|
|
|
|
# Also log via syslog (just for demonstration :-).
|
|
:global syslog=y
|
|
|
|
# This says the user doesn't need to re-enter password if super cmds are
|
|
# issued frequently (so that we "know" they are coming from one person).
|
|
:global renewtime=y
|
|
|
|
# =======================================================================
|
|
# Give access to line printer commands to some users outside office hours.
|
|
# (During office hours, the regular system manager keeps these functions.)
|
|
#
|
|
:define OfficeHours {8:00-12:00,13:00-17:00}/{mon,tue,wed,thu,fri}
|
|
|
|
# Some line printer commands that we want to give away to certain users.
|
|
# (The asterisk in the FullPath is replaced by the command; thus
|
|
# typing super enable executes /usr/bin/enable.)
|
|
:define LPR_commands {lprm,lpc}::/usr/bin/* \
|
|
{lprm,lpc}::/usr/lib/*
|
|
|
|
# The users who can use the line printer commands, and the hosts
|
|
# from which they can use the commands:
|
|
#
|
|
:define LPR_users jack@bucket jill@hill
|
|
|
|
# During non-office hours, the following people can use the
|
|
# line printer commands.
|
|
$LPR_commands $LPR_users !time~$OfficeHours
|
|
|
|
|
|
|
|
# =======================================================================
|
|
# The people who can use timeout/restart are:
|
|
#
|
|
:define TimeoutUsers :operator :wheel gv phillips srk
|
|
|
|
# timeout and restart
|
|
|
|
timeout /usr/local/bin/timeout $TimeoutUsers \
|
|
info="Temporarily stop any processes of any user." \
|
|
password=y
|
|
|
|
restart /usr/local/bin/restart $TimeoutUsers \
|
|
info="Restart a timeout'd process before the scheduled time."
|
|
|
|
|
|
# =======================================================================
|
|
# Restrictions on CD-ROM mounting:
|
|
# tas is the only user who may mount cd's on elgar; anybody in
|
|
# group xyz may mount cd's on alpha or delta; and anybody on a
|
|
# host in the netgroup "india" may mount a CD on the "india" machines.
|
|
|
|
cdmount /usr/local/bin/cdmount \
|
|
info="Mounts a CD-ROM on /cdrom" \
|
|
tas@elgar \
|
|
:xyz@{alpha,delta} \
|
|
@+india
|