Page MenuHomeDevCentral

Allow salt group to run salt-call as root
ClosedPublic

Authored by dereckson on Apr 28 2017, 16:12.
Tags
None
Referenced Files
F23903312: D977.id2497.diff
Sat, Feb 7, 19:55
F23902514: D977.diff
Sat, Feb 7, 19:47
F23894072: D977.id2497.diff
Sat, Feb 7, 18:19
F23893862: D977.id2510.diff
Sat, Feb 7, 18:16
F23893578: D977.id2498.diff
Sat, Feb 7, 18:14
F23889483: D977.id2498.diff
Sat, Feb 7, 17:28
F23885313: D977.diff
Sat, Feb 7, 16:35
F23862262: D977.diff
Sat, Feb 7, 08:42
Subscribers
None

Details

Summary

By default, salt-call runs to the current user. As such, we should
allow to use as root to avoid to first have to touch files/directory,
then to .

Furthermore, it's not convenient to install packages or chown.

Security implication is salt group's members have a root access
to the Salt master too, currently Ysul, in addition to other servers.

Ref. T795.

Test Plan

sudo salt-call --local test.ping

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable