On Fri, May 7, 2010 at 6:45 AM, Pieter Baele <pieter.ba...@gmail.com> wrote:
> We use a script to edit /etc/sudoers temporarily to provide sudo access to
> clients for a limited time.
> A cron job checks for a var and after a defined time the line is deleted.
>
> But this way, /etc/sudoers can't be managed by Puppet, because It will be
> overwritten by puppet.
>
> What should I use as a solution to this problem?
>

If you are using sudo v1.7.x (not the default on RHEL/Centos) you can
use the #include feature of sudoers, to put your temp changes in a
different file, and have puppet manage the master sudoers file.

http://www.sudo.ws/sudo/man/sudoers.html#including_other_files_from_within_sudoers

-Adam

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to