Browse Source

icinga2: Beautify sudoers file for Icinga2.

Signed-off-by: Maximilian Wilhelm <max@rfc2324.org>
Maximilian Wilhelm 6 years ago
parent
commit
fbd1e633f7
1 changed files with 15 additions and 1 deletions
  1. 15 1
      icinga2/icinga2.sudoers

+ 15 - 1
icinga2/icinga2.sudoers

@@ -1,4 +1,18 @@
 #
 # sudoers file for Icinga2 monitoring commands (Salt managed)
 #
-nagios  ALL=NOPASSWD:/usr/local/sbin/dhcpd-pool, /usr/local/share/monitoring-plugins/check_bird_ospf, /usr/local/share/monitoring-plugins/check_bird_bgp, /usr/local/share/monitoring-plugins/check_ifupdown2, /usr/local/share/monitoring-plugins/check_conntrack_size, /usr/lib/nagios/plugins/check_mailq
+
+# No lecture for the nagios user
+Defaults: nagios lecture=never
+
+# Network basics (IP, conntrack, routing)
+nagios	ALL=NOPASSWD:	/usr/local/share/monitoring-plugins/check_ifupdown2
+nagios	ALL=NOPASSWD:	/usr/local/share/monitoring-plugins/check_conntrack_size
+nagios	ALL=NOPASSWD:	/usr/local/share/monitoring-plugins/check_bird_ospf
+nagios	ALL=NOPASSWD:	/usr/local/share/monitoring-plugins/check_bird_bgp
+
+# DHCP
+nagios  ALL=NOPASSWD:	/usr/local/sbin/dhcpd-pool
+
+# Mail
+nagios	ALL=NOPASSWD:	/usr/lib/nagios/plugins/check_mailq