[Piuparts-devel] Bug#711155: Bug#711155: piuparts-slave: sudo configuration is commented out

[Holger Levsen]

control: severity -1 minor
control: retitle -1 document that/how sudo needs to be configured for slave
thanks

Hi Zdenek,

thanks for your bugreport.

On Mittwoch, 5. Juni 2013, Zdenek Crha wrote:
> The package installs file /etc/sudoers.d/piuparts with configuration
> necessary for
> running slave under piupartss user. But the configuration in file is
> commented out
> and need to be enabled manually.

right, and this will continue to be the case. piuparts-slave needs root access 
via sudo without a password, and I don't think any package should configure 
such an account.

Especially as one needs to do further manual configuration anyway, we decided 
that those sudo lines need to enabled manual by the administrator.
 
> I've checked git repository for version 0.52 and conf/piuparts.sudoers
> which seems to
> be source of the configuration. It does not have content commented out.

It happens in the Makefile, so we can deploy it usuable via the git deploy 
scripts.

> If the file is commented out from security reasons, it would be nice to add
> a note somewhere
> that sudo configuration needs to be enabled if user wants to run slave
> under piupartss user.

README_server.txt has it, or should habe it, but maybe thats still a TODO 
entry.


cheers,
	Holger
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/piuparts-devel/attachments/20130605/10eaf7a0/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 828 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/piuparts-devel/attachments/20130605/10eaf7a0/attachment.pgp>