diff --git a/etc/sudoers.d/50-lhcathome_boinc b/etc/sudoers.d/50-lhcathome_boinc deleted file mode 100644 index f823e94..0000000 --- a/etc/sudoers.d/50-lhcathome_boinc +++ /dev/null @@ -1,20 +0,0 @@ -# save this file as '/etc/sudoers.d/50-lhcathome_boinc' -# ownership must be 'root:root' and access rights must be '-r--r-----' -# '@includedir /etc/sudoers.d' must be enabled in /etc/sudoers - -# regular expressions are enclosed between '^' and '$' -# this is supported since sudo version 1.9.10 -# for more information read 'man sudoers' - -# the regex patterns given here must match the command arguments in the calling script -# missing/additional arguments or an argument order not in sync causes a command to be rejected - -# the commands are permitted for the local group 'boinc' -# ensure the calling user is a member of that group - - -Cmnd_Alias LHCATHOMEBOINC_01 = /usr/bin/cat ^/etc/sudoers.d/50-lhcathome_boinc$ -Cmnd_Alias LHCATHOMEBOINC_02 = /usr/bin/systemctl ^(freeze|thaw) Theory_[-a-zA-Z0-9_]+\.scope$ -Cmnd_Alias LHCATHOMEBOINC_03 = /usr/bin/systemd-run ^--scope -u [a-zA-Z0-9_-]+ -p BindsTo=[a-zA-Z0-9_\.-]+ -p After=[a-zA-Z0-9_\.-]+ --slice-inherit --uid=[a-zA-Z0-9_-]+ --gid=boinc --same-dir -q -G /[a-zA-Z0-9_\./-]+/runc --root state run -b cernvm [a-zA-Z0-9_-]+$ - -%boinc ALL = (ALL) NOPASSWD: LHCATHOMEBOINC_01, LHCATHOMEBOINC_02, LHCATHOMEBOINC_03